Very much this: there should be a process for "emergency change" and that process has to be used for every actual emergency and not for anything else.