[plasma]

To add to this, you can put destructive operations like this into phases, for example, before delete, a power off of the service has to happen, and the delete logic won’t run if the power off time hasn’t elapsed 7 days, etc.

These safety layers help present destructive operations more visibly before they are completed.