Managed solutions in production is a great thing.
Being able to mark solution components as uncustomizable is another great thing.
But those concepts are not enough, there is always some way for admin users to mess with the system.

We need a flag that can be set on production instances of Microsoft Dataverse to lock it down completely from customizations.
Environment Variable Values and anything personal (views, flows, apps etc) are probably the only "customizations" that should be possible to touch.

Many bad things and headaches and consultant hours have come from unmanaged messing with production environments.