I use the CSV export function on a weekly basis to backup the credentials stored in Passbolt. I open the CSV file in Excel and then save as a password protected Excel document.
Security wise that feels like bad opsec? Why store password backups in Excel when you can export them as Keepass? My implementation is exporting it as Keepass with a strong password, and save it to a USB that’s placed in a safe location. The password itself if base64 encoded, split in two and each part is printed on two different papers. I have one piece and another has the second one.
It’s used for disaster recovery, and not used in regular production.