DigitalOcean should implements one more layer security when destroy droplets.
Like: account password confirmation, or 2FA token confirmation, anything.