Never keep your data and your backups in the same place. That’s true for in-office servers, data-centres and cloud. If you must use cloud, use two different providers for your own services and backups.
Also, have a disaster recovery plan ready, and exercise it regularly.
Maybe I am in echo chamber, but none I know exercised recovery plan… ;) except of power plants and othe critical infrastructures, and maybe large enterprises. Others imho use 3–2-1 approach but haven’t tried to recover data.