In ranger, dd is cut/mv and dD is delete, but dD on one file spawns a command with :delete typed in so you have to hit enter to pull the trigger, and doing it with multiple files has the same behavior plus adds a y/N prompt asking if you're sure you want to delete those specific files. This is enough friction to prevent most mishaps, but not enough to be annoying. I would suggest taking inspiration from this.