So if you're not in the IT business, does that mean you don't have to do backups? Or does it mean that if you have computers, you damn well better understand the IT business and do it the same way the professionals do?

In this case, Yelp's security policies are stupid. They're not making money from security, but that doesn't mean they get to be stupid.