I still think it would be good to have a branch for environments, because version control tools make it easy to see what's changed. For example, if you suspect some clever admins are changing production, you use SDF to pull down the latest, then diff that against your production branch? (then commit the changes, bringing things back in sync). If you do this sdf-pull-down-from-prod before you push, you should be in good shape, no?