MinIO Object Lock can stop protected backup versions from being permanently deleted through the S3 API before their retention expires. The safe VPS design puts the object store in a separate failure domain, gives the backup job no retention-bypass privilege, proves a version-specific delete is denied, and ...