Comment by jacquesm

> I think in startup land - where devops takes a back seat to product - it's probably very common.

It is, but it need not be. It's pretty easy to set up at least some backup system in such a way that whoever can wipe the production systems can't also wipe the back-up.