I've never run into that myself. I do always inspect the plan before applying, but fortunately Terraform makes that easy.
Personally, I prefer it to alternatives like Boto/Troposphere because it's fully declarative and not coupled to a single cloud.
I'm going to throw one thing in here about terraform over boto / etc, it's actually really nice to have a way to put together your own modules. I think they could do a better job with some common libs to make it easier, but overall it's super powerful.
Seems like a 'principle of least surprise' violation.
Is that something others have observed?