Reply to post:

I know it's a naive question, but maybe that's what's needed. Why isn't there a system of successive read-only backups that can only be wiped and reused manually/offline - retained for a significant time period?