The first thought I had, though, was if some team decided to pull down their prod DB for testing so they had 'realistic data'.

Because that would be a much bigger problem than sending an email by accident.