Does the Backup API preserve field-level security and sharing rules during restoration?

Salesforce provides the Backup API to facilitate the recovery of deleted records through daily incremental backups. While the API allows for the retrieval of record data, the behavior regarding the restoration of metadata-driven access controls remains unclear.

When records are restored into an organization, there is uncertainty regarding whether the system automatically reapplies the original field-level security (FLS) and sharing rules associated with those records, or if the restored data defaults to the current Org-Wide Defaults (OWD).

What is the expected behavior for security settings on records restored via the Backup API? Does the restoration process maintain original sharing associations, or must access be manually recalculated?