Hacker News Reader

That ANY kind of config change should be rate-limited has been pretty obvious and hammered on in SRE manuals for at least 10 years.

And who sets the limits? MS? What if a company WANTS to wipe their entire fleet?

Require dual sign off

"Call support so they can turn off the safeties for an hour."