[bombcar]

I do an off-line, off-site backup once a year that never gets overwritten. ZFS snapshots can help here, too, for online stuff, especially if you have monitoring about changeset size.

[mavhc]

zfs server where you can only ssh into it with 1 user, and that user cannot zfs destroy, only zfs receive