I think you are slightly misreading it. The rule is a requirement and an explanation. Requirement: for POST requests, we require that developers build a user c

I think you are slightly misreading it. The rule is a requirement and an explanation. Requirement: for POST requests, we require that developers build a user confirmation flow Explanation: to avoid destruction actions I think you are reading it as if it said: > for POST requests, we require that developers build a user confirmation flow *for* destruction actions