... until the connection pool is misconfigured or something and the writes can't get in.

Touching mission critical things always has risk and those risks have to be mitigated at a political level. If the programmer is this bad at respecting political ownership of responsibility, he has no business touching production this way.