As someone else said, Prevent is also an option (which would include backup in my opinion).

Though backups can get encrypted too, if it’s not setup to prevent this.

Prevent, in my opinion, is the path.

That should always be step one. Don’t negotiate with ransomware!

Leak extortion is the main issue nowadays, not covered by backups, I’m afraid.