Comment by nucleardog

> LGTM ensures that, for example, a single individual can't push a code change that drops the database.

Personally, I've seen LGTM let slip complex bugs in accounting code (admittedly, not great code) that went on to irreversibly corrupt hundreds of millions of accounting records.

Yes, it will catch "DROP DATABASE", but when it's still letting through major bugs that similarly require a full restore from backup... It seems functionally equivalent?

Given:

> There are lots of places where we require that no single person can break the system at least in a certain way.

I don't think code reviews are a solution. I mean, they're one of the better solutions I can think of, but they're not actually a solution.