In addition, buttons and actions that require admin permissions should look different from those that do not. Ideally a similar distinction for moderator actions.
This isn’t just about security from malicious actors, it’s also about security from admin carelessness…