They automated away the part that had a human error (the internal tool with a field left blank), so that human error can't mess it up in the same way again. They should move that human labor to checking before tons of stuff gets deleted.
I now put a -e/--execute flag on every destructive command; without that, the script will conduct some basic sanity checks and halt before making changes.