I prefer to run my machines in such a way that nothing critical resides on them. I use ansible to configure them in a uniform way. All critical data is "in the cloud".