In my experience you literally can't idiot-proof ops. In every operational role I've ever been in there's still very trusted people hammering out commands with very privileged accounts.

Even at my last role people would get angry at me when I'd ask for "command confirmation" and/or "an extra sets of eyes".

In my world, I favor getting it right vs. responding to mistakes. It's the difference between "scalable" and "firefighting".

Having a SPF asset who holds the keys to the entire kingdom is a completely different problem, and a different conversation.