The database issue actually has a simple solution, which I'm surprised none of these firms implemented. The database backup is kept someplace where the AI doesn't have write permission. Most databases even have a "transaction log", which means you lose at most minutes of data if the AI accidentally drops the production database.