Hi JonasBack, the backup is secured with your personal Microsoft account credentials. So yes, if someone can login to your account, and also successfully complete two step verification for your account, they can restore your backup on any device.
Right now, there aren't immediate plans to enable backup for Microsoft work accounts, because we need a mechanism for admins to turn cloud backup off. However, we are currently working on a mechanism to allow admins to enforce other settings, like "App Lock". Admins won't be able to enforce settings through App Protection Policies. When we did the investigation, we found it didn't make sense to go that route, because some of the Intune App Protection Policies conflicted with Authenticator. For example, through APP, you could require MFA to open an app, but Authenticator is your mechanism for MFA, and so you get into a chicken-and-egg scenario. Instead, there will be a way to apply settings specifically to control the behavior of Authenticator.