Pretty similar experience for me, albeit I've only been managing it for about a year.

Restore from backup testing was straightforward. We haven't had any problems w/ the application itself.

I used that that hardening guide for my setup. The one I manage is exposed to the Internet and I'm bringing traffic into it via a reverse proxy.