If everyone can delete your prod database via API or by any other means - you need to sack CTO without severance package.