Export/Import vs Third‑Party Backup: Which Keeps Attachments?

When creating a reliable backup of a Trello board, the goal is to preserve every element—cards, lists, checklists, labels, comments, and especially attachments—while maintaining the original list ordering.

The native JSON export is well‑documented but intentionally omits attachment URLs and comment bodies. Importing the JSON recreates the board’s structure, but the "pos" field is ignored, so card order is lost unless a custom reorder step is added.

Unresolved behavior centers on whether attachments can be recovered from the export, how to restore card ordering reliably, and what risks arise when relying on third‑party tools that scrape the Trello UI for missing data.

1) Does the native export contain any reference to attachment URLs that could be leveraged after import?
2) Can a script reorder cards post‑import by interpreting the "pos" field from the original board?
3) What documented risks accompany the use of third‑party backup tools that scrape the interface for attachments and comments?