@neil
Let me put it this way: at Atlassian, we standardised deployment of a utility (molly-guard) that makes you confirm the hostname you think you're logged into before allowing a reboot or poweroff command to proceed.
Not as rare an event as one might prefer, especially when ssh-agent enables a troubleshooting session to involve ssh being threaded through multiple servers.
@lkundrak