But what if a scammer walks grandma through backing everything up, unlocking the machine, installing a rootkit, and then restoring from backup? /s

(Joke is on you. You thought you'd be given access to app data to back it up? That's against the security model.)