The better way is for nobody to have direct write access to the database, but instead for automated tools to do things like that, using reviewed code and config and writing an audit log of actions taken. The trust thing is part of the reason this is a good idea, but it's mostly a good idea to avoid good-faith accidents. I think it is common for companies that haven't yet had time to build those automated tools to delegate their work to senior, very trusted, engineers. But that's not a good solution, it's just more expedient, and a bit better than the database being world-writable, which is a bad solution.