How to backup the backup?

Welcome to the forum @emederios

I’m not sure I follow these two thoughts. The latter complete copy would be made incrementally as first paragraph suggests. Duplicati makes new files, doesn’t overwrite, but will delete when it runs compact.

Keeping the original copy of the rsync (or rclone or whatever one-way file-based sync) would allow the restore to use that copy without restoring a backup-of-backup, unless ransomware etc. destroyed it…

Propagating issues, whether from Duplicati bug or ransomware, is a concern with cascaded backups. Best practice for backup safety calls for multiple backups made in very different ways. Best protection against ransomware relies on backend security, as malware on host may have full control of machine.

SFTP/SSH backups to a Linux server with added security was one approach to protection against that.

Financial services industry regulations may require records in non-erasable and non-rewritable stores which some cloud providers (Amazon S3 for example) can provide. WORM also stops ransomware…