Off server backups are useful protection against malicious actors and inept automation. What solutions are HN folks using these days? LTO, optical, write-only

Off server backups are useful protection against malicious actors and inept automation. What solutions are HN folks using these days? LTO, optical, write-only ceph volumes?