Something doesn't add up here...
How long does it take to push __all__ the files back to the cloud? I'm assuming the ransomware will have hit a lot of files.
Does the service really make a copy of every file every day? I would have thought it would only upload changed files.