A developer shouldn’t be able to do this thing either. So unless they were the person in charge of securing things, it’s not their fault that it was even possible to do. Setup processes with oversight.

If a junior dev somehow finds a way to drop our prod database, that is on me, not them. Why did I give them access to do that?