Immutable backups block delete and overwrite commands at the storage level using cryptographically protected timestamps, ensuring that even compromised administrator accounts cannot destroy backup points before the retention period expires.