Comment by nicoburns

For particularly dangerous operations, even better is to make dry run the default, and force users to explicitly opt-in to actually running it.