Earlier quoted context omitted.
You’re not wrong but there’s ways to do backups properly in AWS and I’m not aware of there ever being an incident where AWS has lost data. It’s not a bad idea store backups offline but costs might make that an expensive proposition.
S3 isn't perfect. Read the fine print. I've had buckets and objects disappear into the ether. It is exceedingly rare, but it's not impossible. Offline/alt-cloud backups are probably a lot cheaper than you think, and will win you points during any audit.
With the caveat that you're going to have to implement all your access controls, monitoring and compliance mechanisms on those alternate backups. No point winning points during an audit for having backups outside AWS if you lose even more points for "backups weren't properly secured against unauthorized access".
And you're regularly restoring from those alternate backups as well to check their integrity, right?