Arch packagers helped security and hurt usability by running user=duplicati group=duplicati.
Maybe that’s what you saw. It cuts risk if web server gets hacked, but denies lots of access.
File access permissions home directory
No Access to files/directories
File access rights problem
Installing Duplicati on Linux (Arch / Manjaro)