Backup Container on USB drive?

veracrypt is better, yes; that’s what PG recommends afair. Cryptomator is primarily a cloud solution, so while you can technically use it encrypt the disk drive it’s better to use veracrypt