I'm not quite sure how that's a condemnation of ansible, since the same can be said of any automatic pull-based system. In fact, the same can be said of any automation - it's quite easy to break every system in your environment if you make a mistake. I myself once knocked out our entire QA environment via puppet when I made a mistake with the firewall config assigned to the default node.