You could also make the Arq backups in your S3 bucket immutable, for more ransomware protection.