James and Indy,
These are very helpful. But, I have no idea what air-gapped and SFTP transfer and windows mounts are. I am guessing many others don't either.
Now I have preached probably three times in this thread alone that I backup two backups incrementally to an external USB drive and disconnect them. Maybe that is air-gapped. This is over and above my regular backups.
You can also disable the driver. I hope they can't get around that.