Team members can also work in their own private branches that are pushed to a single repository - that's usually sufficient as a "backup".
This is similar to the open-source maintainer model.
Bad assumption. However, branch protection sounds cool. Will investigate it.