This is a great example of the difference between "safe" and "secure".
Two locations is intrinsically less secure, not more. You're exposed to exfiltration from either site. It is, however, safer, because you need both sites to fail before you lose data.
Two locations is intrinsically less secure, not more. You're exposed to exfiltration from either site. It is, however, safer, because you need both sites to fail before you lose data.