In all fairness, you need more than just off-cloud backups to guard against a single pissed off employee (make sure you&#x27;re locking S3 and your local backups with different credentials, and the credentials to read the backups can&#x27;t be gleaned from the credentials that write them) or a single fat-fingered command (kingdomofloathing.com once blew away N days of user progress by accidentally running a backup script in the &quot;restore&quot; direction against prod data).