Until Claude decides to build its own tool on the fly to talk to your dB and drop the tables

That is why the credentials used for that connection are tied to permissions you want it to have. This would exclude the drop table permission.