This seems poor hiring rather than anything tech can or should solve. On a general note, Infra could be more like cattle than pets perhaps ? If configuration i

This seems poor hiring rather than anything tech can or should solve. On a general note, Infra could be more like cattle than pets perhaps ? If configuration is applied via version controlled and reviewed automation (ansible, helm , hand-crafted YAML...) perhaps could have been mitigating ? - dev-ops like this is considerably easier on linux than on Windows However like i said tech cannot solve poor employee choices, setting up and following the systems without bypasses depends on the same employees, so nothing someone with malicious intent cannot undo.