It's a process problem. If an engineer shouldn't be able to run a SQL delete query without a where clause, then there should be processes, procedures, or tooling in place to prevent that.