Storing a backup on the router itself is a risk. If the router is compromised, the backup is too.
Newer versions prioritize or mandate .backup file encryption using AES. mikrotik backup patched
Modern RouterOS versions use stronger hashing algorithms, making "brute-forcing" a stolen backup significantly harder. Storing a backup on the router itself is a risk