The risky part is not the button. It is the missing review.
- Searching by group name in one screen and calling the review done
- Treating rename as risk-free because access is not removed
- Deleting a group before checking shared schemes
- Failing to keep a baseline for the next review