Yes, but that is not inevitable. Backups can be air-gapped. And yes, there would still be minimal loss. But not enough to be extorted over.