the T2 chip encrypts everything going to and from SSD
Backups, backups, backups. Otherwise if your machine dies, your data dies with it.
So if you must keep an external backup - which is likely to be unencrypted - what is the point of encrypting the internal storage?
M.