This incident feels like a strong argument for stricter guardrails around internal config propagation