All of their resource management for DNS, certs, domains, etc is done using sub-commands which are not reviewable. Sure they can have an audit trail of events,

All of their resource management for DNS, certs, domains, etc is done using sub-commands which are not reviewable. Sure they can have an audit trail of events, but Terraform/CloudFormation are industry standard now, as changes can be easily previewed and reviewed by peers. Single-command deploys are cute, don't get me wrong, but it's ultimately a gimmick. It's great for solo or small teams, but for larger teams, they'll ALWAYS use CI, and they'll ALWAYS want to restrict damage that a single team member can do to the infrastructure. There's nothing novel about single-command deploys. Hell at Segment we had "/deploy blog" in Slack for the simple cases that we weren't worried about, tons of companies do this stuff. Most at very least have git -> CI deploys which is a more correct way to do things for real teams.