Lesson here is that the best practice for a backup system is to make it so that two (or more) different entities need to screw it up at the same time for you to

Lesson here is that the best practice for a backup system is to make it so that two (or more) different entities need to screw it up at the same time for you to lose data. Because entities do screw it up. Note, the hardest part, here? is that you are one of the entities. It's very hard to design a system where a hostile entity compromising owner credentials can't lead to data loss. Best I could think of would be a service that keeps your data available in read only mode for a certain period of time (for which you pre-pay) - but I don't know of anyone offering such a service. I suppose a stack of blue-rays in a safety deposit box would come dang close; I mean, sure if /all/ of your credentials were compromised you are still screwed, but if they can impersonate you in person at the bank... well, that's a worse compromise than most people plan for.