> perfectly safe things like triggering deterministic and guardrailed CI/CD pipelines or read-only queries of production data

I... question whether the second one is perfectly safe.

When the data in question has absolutely zero sensitive content or customer data and goes through a query CLI with guardrails against excessively large queries? Yeah that's fine.