May the additional security requirement deter sensible backup procedure? Like you can't have copies of backup somewhere? Or backups have to be encrypted and t

May the additional security requirement deter sensible backup procedure? Like you can't have copies of backup somewhere? Or backups have to be encrypted and the keys are in a USB drive somewhere, which had gone missing/bad and the encrypted data can't be recovered?