Love it! I just recently started using Syncthing and may implement what you've outlined here.

As a fellow paranoid, what mechanism are you using for the separate backup?