I agree entirely with the sentiments here, but I wouldn't consider it a security issue. A safety issue more like.
Specifically, the axes of security are integrity, authentication, and availability. Backups give the illusion of helping both integrity and availability. However, without practiced and verified recovery plans, they do neither.