Here is what you can do with 'rclone' and immutable ZFS snapshots - second screenshot:

http://rsync.net/products/universal.html

The workflow here is a little different than at Amazon or Backblaze, as we actually built the rclone binary into our environment.

So you can run 'rclone' without actually having it installed yourself:

    ssh user@rsync.net rclone s3:/some/bucket /rsync.net/dir

... and since ZFS snapshots at rsync.net are immutable (read-only) your account accumulates point-in-time versions of your data that are immune to bad actors like ransomware or Mallory in her various forms.

You can also, if you choose, do nothing but "dumb syncs" with rclone since retention can be handled with an arbitrary day/week/month/quarter/year snapshot schedule.