Resilient filesystems/raid/multiple backup points should be more than enough.
A word of caution on relying on backups without the other types of error prevention you mention: If it takes you a while to notice that bitrot has ruined a file, then it may have already propagated through your backups. The only type of backups that would account for this is archival backups, such as on tape or quality bluray discs.
I like the fake units where I’m in denial about how big this is.