Should your backups live in a separate cloud subscription?
What real attacks on cloud backups tell us about keeping the recovery copy in the same Azure subscription as production — where immutability holds, where a subscription boundary helps, where only a separate tenant does, and what the regulators and frameworks actually ask for