Status: OUT
GCP production irrecoverability compounds across layers: infrastructure-level immutability locks resource configuration at creation (AR format, KMS key rings, WIF pools, Cloud SQL private IP), while CMEK key destruction permanently eliminates all encrypted data — mistakes at either layer are unrecoverable, and the layers are independent (a correctly configured key ring can still encrypt data you can never access, and a perfectly mutable resource can have its data crypto-shredded).