What usually gets missedOffsite copy

Could one admin login delete your offsite copy?

Assumed

There is an offsite copy, so it is protected.

Checked

The copy is locked for a set period: no single admin login can delete it or shorten the lock, and someone has tried.

None of these prove an environment is safe. They show where the picture is assumed rather than checked.