I use a combination of backup routines.
Easiest and simplest and most secure is the procedure on my linux server. Data is backed up automatically onto an i3 computer with a mechanical hard drive that I got for free. Using an over the network back-up using the free (open source) operating system tools.
From time to time I disconnect the server from the network, temporarily reconfigure the router and test the back-up server.
This is not only data backup, it's disastor recovery.
For windows backups I copy my data onto either 2 usb drives or 1 usb drive plus 1 other computer.
Onedrive is fine as long as you can get it for free or don't mind paying the subscriptions to Microsoft.
I'm more of an Open Source guy and don't see why I should pay for anything when I can get good enough alternatives for free.
BTW any files stored on Onedrive are backed up. That's because backups are made of the data centre servers that Microsoft use to store your data. IE Microsoft handles the backups for you. However, if you delete a file from Onedrive, all the copies of that data will be deleted. Simple answer: create one or more backup or archive folders in Onedrive and copy your main Onedrive data into that. So that at any time you have 2 or more copies of your data on Onedrive. If you are worried about your Onedrive account getting hacked, encrypt your archive folders with a different secure password.