I'm not sure we should be telling people to use --destructive. It's ok for dev and staging sites, but should be avoided on production, even though there are safeguards in place to *not* run destructive tests on prod. Maybe it would be good to just add a note about that, explaining what --destructive does and that it should not be used when running against production.  Again, I'll defer to the team about this if anyone has any comments.