You presume the attacker does not know the location of these backups.
Smart attackers do extensive research on their targets before performing the attack.
We have arrived at why "a pretty basic backup" is no longer feasible for...any business. A hard sell for a four person business with no dedicated IT team.