You read that right. Currently, the DR plan is "replace/repair the machine and bring everything back up from a backup". It's not a good plan, but it's also only the short term plan. Longer term, I'll likely add another control plane node or two.

Run three. Helps with quorum.