Reminded of Rachel’s post about requiring confirmation for exceptionally destructive actions (https://rachelbythebay.com/w/2020/10/26/num/).
A relevant tag: #devops
My thought is that the message “you’re about to ban 123,456 users, please confirm how many users you’re ready to ban” would have been a useful safeguard.