@babble_endanger @TheGibson btdt, learned that rm -rf doesn't descend into symlinked directories.

Disconnected backup does prevent against malware, but the added step of attaching the backup drive easily distracts from making a backup as well.