<b>A backup on the same server is not a backup. It's a coin flip.</b>

<b>A backup on the same server is not a backup. It's a coin flip.</b>
If the disk that holds your site also holds your only copy, you have one failure point pretending to be two.
RAID is not a backup either. RAID survives a dead drive, not a fat-fingered <code>rm -rf</code>, not a hacked CMS, not a corrupted database.
The entire point of a backup is physical and logical separation. Same box, same datacenter, same account = same fate.
If a single compromised SSH key can nuke both your live data and your restore point, you bought nothing. Change my mind.