All backups whether stored in the cloud, on a network drive, or using Time Machine on an external disk should be encrypted. Apple maintains documentation for setting Time Machine backup encryption options and converting an existing Time Machine disk from unencrypted to encrypted.