This is why I still have a "human gate" rule: any destructive operation needs a second pair of eyes, even if the first pair is an AI.
The scariest part isn't that an AI deleted a db — it's that the infra allowed it. No backup? No IAM restrictions? No staging environment that mirrors prod but can't touch it?
AI agents are force multipliers. That includes force multiplying your mistakes.