I've become increasingly convinced that the only long-term reliable solution against hypothetical ransomware attacks are airgapped backups. In some industries, there exists the concept of data-diodes that restrict the flow of information in only certain directions.

There almost needs to be a reliable, push-button WORM-filesystem "box" that people can plug into their computer a few times a week to perform a full snapshot. Storage is cheap, it's the implementation that's always the barrier.

That is only half of the problem. Modern ransomware will steal data and also encrypt it. You may be able to restore data , but don't want data leak.

limit everyone's access to the good shit.