I’m at around 1-2 TB per month, so you clearly have some room for improvement there xD

I do push only, as I’m using cloud-based object storage, so I know the destination is online 24/7. I do encrypt them before uploading, so couldn’t care less about privacy or security. Only availability, but if one uses multiple different cheap storage providers and replicates the backups, it doesn’t matter either.

It’s also easier and more secure to automate push if you don’t fully own the destination.

I’m using headscale with headplane as the UI, looks like tailscale, is feature complete (at least it says so on their GitHub readme). Headplane even integrates with an external OIDC provider (I self-host Keycloak for centralized identity management across my services).