IMO it's distinguishing mistakes from pure negligence. A developer who's able to easily run scripts in production without any checks in place is different than

IMO it's distinguishing mistakes from pure negligence. A developer who's able to easily run scripts in production without any checks in place is different than a developer who knowingly sidesteps existing processes in order to perform a task faster or easier. The punishment for one versus the other should be very different.