Good point - I'll enhance the documentation to cover the nuance (in a separate pull request) when using that flag. I have minimal concerns about community members running destructive tests against dev/state with their own credentials.