Answer
Stopping the services isn't enough on its own when restoring over an existing instance — remove (uninstall) the existing instance entirely before extracting the backup and restoring it. Leaving the existing instance's files in place, even with services stopped, is what causes the access-denied errors during extraction.