It's a good point - a plugin that logs access won't work if you can't access the WP admin! If you move up outside of the WP environment you get into the hostin

It's a good point - a plugin that logs access won't work if you can't access the WP admin! If you move up outside of the WP environment you get into the hosting/server world and the solutions become vendor specific. I would imagine there is (or should be) a third-party backup and logging solution that keeps the data offsite but works host-independent.