> Sometimes if it's in source control, someone has still edited something on production and not checked it in.

I worked at a large fintech company that had serious problems with this. About the only hope we had for mitigating it was moving all the services to run inside docker containers and of course ban developers from accessing the systems directly.