A groovy script can easily delete builds that are marked as permanent.

There should be a protection for that, and if the script insists, it should clear the flag first.