I agree with Gojko Adzic 100% on Don’t deal with problems like Gaggia, which is to say, if you let the user break the product — and hide it in the manual — you lose at design.

In this case, it’s even worse because destroy the coffee machine is never a valid option to have on a coffee machine, but delete the database is something you have to allow somebody to do (and admins are also users). This makes my job even harder because one of the operations my team needs to provide users is delete & prove it’s gone which precludes any undeleting.