append-only backups

How do you protect server backups from a compromised host?

I currently run restic on each server and push backups to an R2 bucket every hour. The credentials are limited to that bucket and allow object reads and…