Can we at least agree to draw the line so that if a single call can delete the live data AND all backups, they shouldn't be called "backups", but rather snapshots?

I would also say that if your backup is controlled by the same third party as the primary, it's not a backup.