Most of these places have their backups on directory joined machines with storage that is badly configured. Backup systems should never be joined to the domain

Most of these places have their backups on directory joined machines with storage that is badly configured. Backup systems should never be joined to the domain specifically for this reason--but it makes configuration harder so most places skip it.