> backup the attacker can reach is not a backup

you can have append-only backup systems.