You missed the (and doing it properly) part. Could you do it on his setup? sure. Could you do it on your setup recommendations? Sure. Could you do it on a little raspberry pi? Probably. A industry standard best practice for backup is 3-2-1. Do all companies follow industry best practices? Heavens no. Redundancy is great, it may save you from calling someone at triple rates for after hours support only to find your one 48 port switch failed. It’s all about what risk you are willing to take on any of this.

Think bigger, someone gets the accounts and releases all of his private messages. If he doesn’t delete them. I’m on the fence about the precident this would set.