I would look at using a cloud backup, on top of a physical backup. That would be the best practice professionally (until you get to remote physical backup level).
Get an NVME for primary drive as it's the fastest. Then you can get mechanical or SSD for secondary, just get something with at least 5 year warranty and free data recovery service (ie iron wolf pro).

we went over cloud storage that was my first suggestion but he doesn't wanna go that route for various reasons.