Comment by teravor

    > backup the attacker can reach is not a backup

you can have append-only backup systems.