IMHO for a small DB I’d encourage sending out an email on each successful backup to ensure it’s completed successfully as a safety check, and zipping it up and emailing it to a known account even. With inboxes being able to take gigabytes, it’s a no brainer. This can be done daily or weekly.

And yes, never allow the files to be deleted from outside. The transfer is a one way valve. If uploading, it’s a write-only operation, no delete unless the file has meta data for expiry.

Nah, write only upload to S3/R2 is the way to go. Why would you add all of the headaches of sending email to your tiny backup.

It’s as much work, and scales 1000x farther than the email approach.