But it’s also common to stick those flags back under some sort of audit system so we know why and how weird states got set. The simplest way is a separate repo with simpler rules for pushing to master.
Though you could also create your own audit system (just make sure it functions even when the entire site is down)