These are programming details that the user should not have to think about.

What’s the correct way to implement it so that it can still be automated? Credentials that can write new backups but not delete existing ones?

This is why I save a copy of m content (music, TV and films mostly). Not so much to consume on a daily basis, but to have a record and copy of stuff that I want in “my library”.