I mean yes, but one of the issuess with “state of the art av” is they are trying to roll out updates faster than bad actors can push out code to exploit discovered vulnerabilities.
The code/config/software push may have worked on some test systems but MS is always changing things too.
You missed the (and doing it properly) part. Could you do it on his setup? sure. Could you do it on your setup recommendations? Sure. Could you do it on a little raspberry pi? Probably. A industry standard best practice for backup is 3-2-1. Do all companies follow industry best practices? Heavens no. Redundancy is great, it may save you from calling someone at triple rates for after hours support only to find your one 48 port switch failed. It’s all about what risk you are willing to take on any of this.