Just ask yourself, what is your plan if a colleague who has just left for a vacation logs on remotely into your network from some country in the Middle East, deletes all online backups (both primary and their copies), and sticks the dropper on the production servers?