In the PC world, I’ve had good luck with Veeam Endpoint Backup (free from Veeam, which is primarily a virtual machine product provider — those products are really good, but not germane here).

The secret is to back up multiple days to some kind of network attached storage that the PC user does not have write access to. If a user gets hit with ransomware, it runs as that user; anything they have access to is vulnerable. Endpoint backup lets you attach to storage with a separate set of credentials.

I’m pretty sure they also have backup apps for Linux and Mac, but I haven’t used those.