I guess it's more that we have development environments to play around with, the staging environment should be treated as prod - ie treat it the same with infra, security, support policies etc.

But that's true - it's better to play in staging than prod!