[outworlder]

Exactly. Planning accordingly is the right answer.

Assume anyone can destroy your infrastructure at any time (by mistake or otherwise). This could be done with cloudformation, terraform, API calls, and essentially any automation(with different levels of safeguards).

Be prepared for that. Be careful with your data. Not so careful with individual servers - they should be cattle, not pets.

EDIT: If this is a production system, one could take away any 'delete' permissions until they are needed again.

[ForHackernews]

"cattle, not pets" is a nice slogan, but I think most ranchers would be angry if a junior ranch hand accidentally poisoned the entire herd with a typo.