On: Hit by Ransomware Attack, Florida City Agrees to Pay Hackers $600k

[JoshTriplett]

Then you have a backup server that's privileged to access data from clients, which makes the backup server an attractive target.

[dmurray → JoshTriplett]

Then you reduce the attack surface on this one special-purpose machine, which is much easier than doing the same on all your employees' desktops.