Totally agree with you, and now that you bring it up in this way I think I want to change how we execute (Django) migrations at work. Create a separate user wi

Totally agree with you, and now that you bring it up in this way I think I want to change how we execute (Django) migrations at work. Create a separate user with higher privileges that can run migrations. Use that connection during the deployment phase that executes migrations. Otherwise, the app gets a standard "user" without DDL access.