The choices do not quite match my usage.
- Once-daily TM backups–but only of user files, not the whole disk.
- Weekly SuperDuper! full, bootable clone/backup.
- On-demand versioned backups using CCC of selected directories.
I was testing remote login via SSH from work. It worked. When I got home, I checked the logs and found out that someone else had accessed the system and dropped a malware payload into the /Users/Shared directory. The files were not Mac-compatible. Nonetheless, I wiped the drive and restored from a SuperDuper! backup.
I also turned off remote login and Guest account.