When running mariabackup and passing the password on the commandline, for security reason having the password in a config file is not acceptable, the password gets copied in the tool_command setting in the xtrabackup_info. This is often not acceptable, having a password stored unencrypted in a file is against the security policies of many companies. There are workarounds but really the backup system needs to be secure by default and having the password in this file actually does not really privide any usefu purpose anyway.