Avoid sql-drop or sql-sync drush commands in a particular environment
This is best done with a policy file.  See policy.drush.inc, which has an example policy prohibiting overwriting a production server.

The example could be expanded to perhaps check for patterns in the destination parameter (any alias containing 'prod'), etc.