We already provide this. The zfs snapshots that we make of your account are immutable (read only) from the perspective of your credentials. So even if you pub

We already provide this. The zfs snapshots that we make of your account are immutable (read only) from the perspective of your credentials. So even if you publish your rsync.net credentials and Mallory wipes out your entire base account, the snapshots will still be there (until they rotate out, of course).