Fleecing mitigates, but the recommended and safest is local BPS backup then Sync over WAN/VPN.
Fleecing from the docs :
When a backup for a VM is started, QEMU will install a "copy-before-write" filter in its block layer.
This filter ensures that upon new guest writes, old data still needed for...