Backblaze vs ARQ

so they aren’t holding the keys

That’s technically possible indeed (and probably what they do), but all files you restore are still available unencrypted on their server, even if only for a short period of time.