Add a requirement for a manual review / approval (by an AutoEditor?) prior to implementing major (or all) destructive edits. This "approval" could be applied at any time, but should not necessarily bypass the standard voting cycle.

Destructive edits, when misapplied, can cause extreme damage to the dataset that is a huge undertaking to restore / repair. An example is Edit #47914826 where the editor merged releases rather than release groups.