[djbusby]

Can't ZFS do these kinds of things with snapshot?

[implements]

Yes, but make sure any machine vulnerable to ransomware infection doesn’t have the ZFS server root account credential, directly or by reusing it as a share password, because even though snapshots are immutable root can still delete them.