You should write a Python script for you backups.
The key for security is to keep the code used for file maintenance separate from the code used for web development.
It isn't an impossible task.
Unfortunately, it is common for people to confuse such code.