Thanks to everybody for their replies. I now understand that --incremental hot-copies are sufficient for regular backups, which can then be mirrored by content-aware file- synchronisation tools, but the problem remains of preventing an accidental propagation of corrupt data into the backup. How do you solve it?
-- Please, do not forward replies to my e-mail.