At least their backups worked! Still up to human error though. Hard to get around human error.
The developer and production environments should be separated at a deep network level making it very very difficult for anything (rogue script, rogue admin, etc) to access production environment accidentally.