> How does a medium-sized SME were all the payrolls depends on Sara and her USB stick do if, literally, their servers do catch fire.

The SpecOps guys have the following bit of wisdom on offer: "Two is one and one is none".

And a backup you haven't verified you can restore from isn't one.