Yes. Two data centers. At least. Anything big enough to be nationwide probably uses more. Two is a *minimum*.
What the heck does one home-grown psycho blowing up a singular building have to do with that? Other than it'd have zero effect?
The discussion was about who has access under normal run-state to delete data in a properly designed large-scale system. From the command line or GUI.
You never ever give one single sysadmin the "keys" to destroy all critical data including backups. Ever. If you do, you're running a serious risk.
No good sysadmin who knows what they're doing will ever accept that level of power either.
Example: With my level of access, I can delete my company's servers. But someone else has the "keys" to the off-site backup and the other admins have a written plan on how to lock me out in X number of minutes and how many minutes day or night, 24/7, it would take them to put the company back in business.
I can't put them out of business completely. Worst possible case is that I can "pause" their business.
If you want to talk Disaster Recovery or Emergency Operations, for our shop, it's the same thing with a bomb at a datacenter. We'd be limping but still in business. That's the scenario you offered up.
Honestly datacenter power outages are still all too common. People still accidentally trip EPO switches. Seen three of those days so far in my career.
Something as big as a national MX record system would be many many layers "deeper", if done right.
Any IT department who can't answer those questions above, by the way... in writing... should be fired. CIO all the way down the line.
This business continuity stuff for data systems isn't that hard. It's not even hideously expensive when done right.