A second copy that only your recovery kit opens
Every history Bandicot keeps can now be copied, encrypted, to iCloud Drive or a disk you plug in, and only your recovery kit opens the copy.
Where the copy goes
Type your recovery kit once in Versions → Backups and Bandicot asks whether to keep a copy in iCloud Drive. Say yes and it copies every history to a Bandicot Backups folder there, every 15 minutes and whenever you press Copy now.
Bandicot never opens iCloud Drive before you choose. Saying yes is what makes macOS ask once whether Bandicot may use it, and you can turn the copy back on later from the same page.
Plug in a disk and Bandicot asks once whether to keep a copy there too. After that it keeps the copy current whenever the disk is connected.
Only your kit opens it
The copy is split into encrypted pieces, and even file names and sizes are inside the encryption. Each pass writes only the pieces that changed.
The key stays in this Mac's Keychain, sealed with your recovery kit. Bandicot does not keep the kit, and a typing mistake cannot replace a working seal: a new kit is typed twice.
If a piece of a copy goes missing, the next pass writes it again, so the copy is whole once more.
Restoring on a new Mac
On a new Mac, open Backups and press Look for copies. Bandicot looks in iCloud Drive and on attached disks, and looking never turns on copying there.
Pick a copy and type your kit. Bandicot brings back its own history and every project's, checks each piece, and names any damaged piece while the rest comes back. A long restore keeps going, and the page shows its result when it ends.