I know there are several other ways, such as a firewall, to restrict access to the Duplicati WebUI, but is there any way to restrict access by IP filtering on the Windows version of Duplicati itself?
No built in mechanism in Duplicati itself (that I’m aware of), but you can use Windows firewall to accomplish this.