Tragically, as you mention, the security restrictions on most apps at this point block filesystem access via adb.

Wild to learn about the OTPs, I'll need to take a look and (likely) rectify that security hole since I manage my backups myself (at enrollment time the keys go in escrow).