I'd suggest turning termination protection on across production instances as a first solution, and consider some sort of infrastructure as code in the long term.