On the security versus convenience spectrum, allowing a user backup and taking an automatic corporate backup are far apart.
Yes you should do the former. That doesn't say much about the latter.
Yes you should do the former. That doesn't say much about the latter.
Or maybe I missed something, and there is actually a way to download your phone backup from Google, or PC backup from Microsoft, as actual files you can browse, without having to have a sacrificial device to wipe and restore from backup?