You should always use Object Lock with compliance mode on your S3 backups. Always.