Given how many projects I've seen that run prisma migrations on prod from their local CLI instead of CI...

This scares me.