In many organisations, a break in a system holding production data is serious even if it isn't a serious break, so being able to roll back or otherwise undo would not cut it.

Much better would be to give them a replica to work on and a change confirmation process that allows signed-off changes to be pushed into production.