I don't understand the problem. If the desired result is to be easily able to restore a compromised system, why not just use USB sticks as the target for backups? I use these aliases in my .bashrc files to make that easy. This first one adds a list of installed packages to my home directory:
alias copyPackages="eopkg li | cut -d ' ' -f 1 | tr '\n' ' ' > /home/jerry/InstalledPackages"
This one (should I ever need it) will allow me to easily reinstall those packages using eopkg:
alias restorePackages='sudo eopkg install $(cat InstalledPackages)'
Then these three make it easy to do an update with a single up command:
alias eu='sudo eopkg upgrade && sync'
alias ed='sudo eopkg delete-cache && sudo journalctl --vacuum-time=3d --vacuum-size=50M && sync'
alias up='eu && ed'
And finally, the backup itself. Restic is a fast and reliable utility from the Solus repository:
alias backup='restic backup /home/jerry -r /mnt/Backups/Linux/malachite-solus-4-1-budgie'
That's essentially just "restic source -r repository."Just change the source to your own home directory, and change the destination to where you want your backup to go. I routinely back up to a remote share, but using USB sticks to maintain a series of backups would be just as useful if no remote repository were available.