📝 **Task:** Implement `validate_backend(cfg)` returning a sorted list of problem strings: `'not_remote'`, `'unlocked'`, `'unencrypted'`. Empty list means the backend is safe. 📋 Implement the function above. Tests run automatically. 💡 **Hint:** Re-read the theory if you get stuck.