I backup all of my LUNs on one NAS to the other which is on a completely separate VLAN and behind a hardware firewall. Those LUNS are then backed up to Amazon Glacier weekly and to a large USB hard drive once a month which is then placed into a fireproof safe.
I’m not completely insulated, but then no one is.
Sounds like I could use your help setting up my backups