Offsite backup needs to always be the answer. Fires have always been a concern in any human situation. Plus lots of other accidents.

Of course the real hard part is how do you mark a record as do not restore anymore. In a medical context this isn't much a problem, but in other cases it is an issue.