Put it on the WAN. Put it ALL on the WAN!
My experience with companies not caring about security and disaster recovery is that they already have a secret imminent disaster. Maybe there were some investment mistakes, historical data corruption that inflated perceived performance, gross exaggerations, or a flawed business model. Having everything wiped clean by an outside influence is, by comparison, a graceful exit.