For the sake of argument (or, because you trust me on this), let's stipulate that Tarsnap is significantly more secure than duplicity; things can go wrong with duplicity (or create untenable administrative headaches) that don't with Tarsnap.