If backups are off-site and secure, i don't see how they could be vulnerable as well.