Without good segmentation, permissions management (I hate to say 'Zero Trust'), backups, and a host of other things to catch a slip up, it's hard.
I got hit recently by a friend who is a game dev and they got hacked, so when "they" asked me to beta test their latest build, which I've done...