WTF. Bad architecture. Even if you have users with “delete” rights in production, which is sometimes unavoidable, where’s the transaction log backups? How could seven hours (potentially 24 hours in worst case) of data be lost?
The company’s infrastructure I manage, the most data they could ever lose in Prod would be 15 minutes worth. If literally every DB were deleted, I could have them back up in a few minutes or so with little data lost. (They are a low-transaction company. For a high-transaction company, I’d make this five minutes.)
This isn’t hard, really. But you have to do the work.