"On the other hand, if I run Watchtower first, I'm backing up the latest version."
This makes no sense. I hope you are backing up the persistent data, not the Docker-Images.So before and after Watchtower is identically in the best case scenario.
(In the worst case scenario, after the docker update your persistent data are corrupted because of an bad version update. So the backup should always be before)