tinfoil writes a backup into an unused part of nand. as evidenced by OP which I assume you have read, tinfoil finds that backup just fine. it just can't write it because writes to cal are blocked.
jeez
dbi wipes the legit common tickets of update nsps as well, so if you hoped to share updates with unmodded consoles you'll have to use a different app to install updates