Saving user data on non-fileservers

[drmiket]

Keeping user data, or worse senior executive owned data, on your VPN server "as a backup" is a privacy fail (the admins have admin - there is no privacy), a security risk that saves intruders the effort of hunting for confidential data because it's sitting there like complimentary sweets and a data loss risk, because your VPN server won't have a full backup like your fileservers. Or the owner just forgets it's there so it never gets deleted.