I do wonder if people over-react to database deletions. I see them from time to time and they're generally not big deals in practice. If the recovery systems ge

I do wonder if people over-react to database deletions. I see them from time to time and they're generally not big deals in practice. If the recovery systems get a little bit smarter it is conceivable that running SQL against prod is an acceptable thing. The real problem is silent or partial corruption. Deleting everything gets detected almost immediately; often minutes after the query is run. Silent data corruption can spread for months and be unrecoverable without thoughtful design. But silent data corruption can come from reviewed code too.