Detects destructive SQL, broad updates/deletes, privilege changes and unsafe patterns, then returns a safer execution plan.