It depends on the circumstances, the amount of data, how fast you need your shit back in play, etc, etc. Honestly, the arguments around this kind of thing are kinda dumb. The only proper solution is to sit down and think about this for a bit:
Do you need air-gapped backups? (I don't know who doesn't, but...if all your data is ephemeral and easily re-created, perhaps your response to ransomware would be to just burn the whole network down and start over).
How much data does that have to be?
How often do the off-line backups have to update?
How many off-line copies do you need?
How much money do you have to spend on this?
Now, what technologies can do all that? Pick one and roll with it.
For me, we only have a few TB of data, so a set of 5 TB spinning drives where we swap one into an enclosure once a week and replicate our latest backups onto it is FINE, and CHEAP. And if we have to recover, it's not the fastest thing in the world, but it'll get everything back in play in a few hours. But we're small fry, so that's OK.
The important point is to THINK ABOUT WHAT YOU ARE DOING. Also, remember that the vendors LIE.