They should be in a database thats protected.
By that I mean, redundancy with a DAG and replicated to other servers or storage that is highly resilient.
The system drive typically is not sufficient and I would not locate the arbitration or any user mailbox on the default database if its located on the system drive.