Greetings from BorgBackup development! Nice hacking, but maybe you want to clarify the video title: You did not decrypt a borgbackup archive with hashcat. What you did is crack an apache apr1 hash with hashcat, which revealed a password that was also used as the borg key passphrase. So you had the borg key and the cleartext passphrase to use the borg key and that's all needed to use that key and the repo protected by that key.