Great presentation, some info is no longer up to date: 1. pg_basebackup now works with tar, streaming the logs is automatic PG10 2. They are ways around the pg_startbackup failure.
Pgbackrest currently supports encryption. You can use S3 or Azure as repository, encryption is always performed client-side even if the repository type (e.g. S3) supports encryption.
