For me, the continuous data protection is the big ticket item that I’m most excited about, with Veeam for Mac as a close second. But I’d also like to highlight the change to Windows permissions in v11, Gostev discussed here the intent to remove admin privileges as a requirement for using the fat Veeam B&R client. A few years ago a review of the requirements of malware to successfully execute was investigated and approximately 90% of all malware required admin rights to deploy, so this is a huge leap forward in security.
I know immutability will get a lot of love here but my one caution I’d still like to echo is that immutability of an on-prem device managed by the same IT that manage the rest of the infrastructure doesn’t prevent insider threats, as it’s an OS level protection it doesn’t stop someone physically removing/damaging disks to break a RAID array, nor stopping someone booting other media to damage/destroy the “immutable” data and as a result it’s still no substitute for cloud connect or S3 service providers with immutability for S3 or insider threat protection for cloud connect.