They were autosyncing. They were prepared for not being able to sync (restore main system and sync back), but not for the sync to replicate a corrupt state.
Any backup strategy with only one backup (instead of preserving historical snapshots) is vulnerable this way.
However, while we planned for the case of the server losing a disk or entirely biting the dust, or the total loss of the VM’s filesystem...