Resilient filesystems/raid/multiple backup points should be more than enough.

A word of caution on relying on backups without the other types of error prevention you mention: If it takes you a while to notice that bitrot has ruined a file, then it may have already propagated through your backups. The only type of backups that would account for this is archival backups, such as on tape or quality bluray discs.

Thank you for helping make the fediverse a better place.