encrypted by both a boot password and a secure enclave held key
Are you suggesting that both keys should be required for decryption?
How would you restore the backup if your secure hardware device is lost/stolen/damaged?
And the owners of the computer can't get the key in the secure enclave? Are they part of the threat model?
Are you suggesting that both keys should be required for decryption?
How would you restore the backup if your secure hardware device is lost/stolen/damaged?