<b>Snapshots are not backups. They're undo buttons that share a fate with the thing they're undoing.</b>

<b>Snapshots are not backups. They're undo buttons that share a fate with the thing they're undoing.</b>
A VM snapshot lives on the same storage array, in the same provider, tied to the same volume. Ransomware that encrypts the disk encrypts the snapshot chain. A region outage takes both. A billing lapse deletes the whole stack.
Snapshots are brilliant for "oops, bad deploy, roll back 5 minutes." They are useless for "the datacenter is on fire" or "an attacker has root."
If it can be deleted by the same credentials that run prod, it's not a backup. Change my mind.