Put infra deletion locks on your prod DBs right now, irrespective of whether you use agents. This was a well established practice before agents because humans can also make mistakes (but obviously not as frequently as we're seeing with agents).

If you do use agents then you should be able to ban related CLI commands in your repo. I upsert locks in CI after TF apply, meaning unlocks only survive a single deployment and there's no forgetting to reapply them.