Check out Clonezilla, which is the perfect tool for the job.

https://mullvad.net/en/blog/2023/8/9/response-to-tunnelcrack-vulnerability-disclosure/ is Mullvad’s response to this topic. TLDR not a concern other than possibly for IOS.

Diastaticus is more of a concern for breweries if it gets into batches where it wasn’t planned for and continues to lower the final gravity due to the introduction of glucoamylase. If the product is packaged to soon it will lead to very bad outcomes with bottle/cans blowing up.This has even caught some very large breweries (Left Hand vs. White Labs comes to mind) but has more often happened at smaller breweries in the last couple of years. Not a fun experience - I know from first hand experience.

Thanks for pointing out dar, out definitely has some very interesting capabilities. My backup took off choice is BorgBackup as it makes local/remote, encrypted, deduplicated backups easy and allows for mounting previous snapshots via fuse fs for easy restore.

Instead of a fire safe which will only offer some protection I would rather get two Pelican style cases. Keep your backup drive(s) in there. Use a deduplicating/encrypted backup software to create two backup sets (I highly recommend BorgBackup). Store one of the backup cases off-site (at a friend’s house, in a drawer at work, …) and occasionally rotate the two cases.