I have a UPC battery backup. Is that not enough?
Depends greatly on the UPS. Most all have at minimum the most basic surge suppression. The cheapest ones I'd not feel very confident with for surge protection. We have 3 rather massive (over half of a full size network rack) Eaton datacenter grade UPS's (all 240v but also has 120v outputs as well). Those I trust 100%. We get some very nasty storms here in the south and I've never once had an issue and we keep right on printing through a power outage for up to about an hour before we have to shut down before the batteries die.
Now at an old location we were at about 10 years ago - the power company had their own issue. That one did fry things. Scared the daylights out of everyone. Every UPS, every surge suppressor, everything plugged in everywhere in the building (along with 5 other tenants in the building) all seemed to explode and catch on fire. Nothing really "exploded" but many things popped very loudly and many things were literally on fire. The power company had their insurance adjusters out the next day and paid for everything that was damaged. I asked and they essentially said the lines became directly connected to the building bypassing the transformers in some freak way. If I remember right they said it was something along the lines of 30kv (30,000 volts) at several thousand amps. It was very quick though - all the power went totally out at nearly the same instant that it went nuts. We were essentially out of business for a couple of weeks just fixing and replacing everything. Fortunately most of the computers were fine. The APC surge strips did just what they were supposed to do - sacrificed themselves, although I don't think APC had catching on fire in mind. A lot of stuff was plugged in directly though and most all of that was toast. I have some pictures somewhere or another of a pile of about 30 crispy blackened surge strips and UPS's.