To prevent attackers or insiders destroy your infrastructure backups, you must use something called an immutable backup repository. This rather stranger