You've described exactly why my company moved from DigitalOcean to AWS a while ago.

Whilst AWS is more expensive and perhaps over-engineered for our use-case, it was absolutely essential to have some kind of ACLs.

I mean, I can't exactly give my junior dev access to DO if it means he can also delete the entire production database and all backups with a misclick.