Does Duplicati support extended attributes, acls and such?

I don’t know about your boat exactly, but there are others doing something similar to what you describe. For example, here’s a How-To for setting up Minio on Linux and Duplicati on Windows:

Duplicati CAN back up extended attributes, however I’m not sure if the Access Control List attribute is included in that. Somebody more familiar with the Linux / MacOS side of things might know, however…