Good points, these risks seem real, though I don't know how likely they are. I have to balance those risks against the advantage of having only one server to pay for, build, and maintain. Also keeping in mind how valuable or irreplaceable the data are.