hosts: all and ansible-playbook --limit seems needlessly dangerous

I opened an issue at Github but was directed here:
https://github.com/ansible/ansible/issues/72027

This may have already been discussed at length but it’s always bothered me that a playbook would need an explicit hosts: all and then later be limited via the command line with --limit…

It feels like hosts: none and a command line argument to specify target host or inventory groups would be far safer.

If one habitually specifies a playbook with hosts: all for use with AWX/Tower, that playbook being used manually is one missing --limit argument away from disaster.

Is there a rational for this design that I’m just ignorant to?