Comment by DarkmSparks

9 days ago

Encryption only protects data for an unknown period of time, not indefinately.

If your threat model includes the TLA types, then backup to a physical server you control in a location geographically isolated from your main location. Or to a local set of drives that you physically rotate to remote locations.