When ransomware encrypts everything connected, air-gapped backups stay isolated and recoverable — your last line of defence.