On: The paranoid person's guide to a complete Mac back...

[ghgr]

> It can be mitigated if your backup service provides two accounts for the same backup: an "append only" account and an "administrator" account.

That's how Tarnsap[1] works (I think the author is the user cperciva)

[1] https://www.tarsnap.com/

[cperciva → ghgr]

Tarnsap

Tarsnap. But yes.