I hate to break it to you, but companies with actual safe rails to deploying to production do exist.

And when things go wrong, it’s never the responsibility on a single dev. It’s also the dev who reviewed the PR. It’s also the dev who buddy approved the deploy. It’s the whole department that didn’t have enough coverage in CI.

I would hate to work where you developed the idea a protected main/prod branch is something novel.