Yes and yes, very occasionally.
We’ve setup an create/read only Service Account to authenticate on the cloud storage using rclone as backend.
BTW, that’s one of the reasons that we choose Duplicati, no cloud write delete permissions is a requirement. The batch command also sets the --no-auto-compat argument.