Opening the book…
The lock converts "one wrong click deletes prod" into "deleting prod requires a deliberate two-step nobody does accidentally". It costs nothing and has saved estates.
az lock create at the group level for every prod group. Removing a lock is itself a reviewed change — the friction is the feature.
Ephemeral prod-like perf environments that are rebuilt nightly can skip locks.