So the question of “why does a public facing api that can delete your database even exit”?

If you worked in cloud environments - every database had public facing api that can delete it.

For the rest or it - yeah, running autonomous pipelines in production which decide what to run and what not to run seems fine until it isn’t.

But every database deployed in a cloud environment has an api that can delete it. Even if you say you’re running on vms - there exist api that can delete the disk, the vm, the network config, etc.