> rm doesn't follow symlinks
That's dangerously misleading. (It's true, but it misses a key piece of information).
rm -rf recurses into mounted directories, at least on Linux. So if someone mounts the company's main fileshare deeply hidden inside a temporary directory, then I delete the temporary directory with "rm -rf temp_dir" then it deletes everything it can on the company's main file share.
I know this from personal experience! Fortunately there were backups from the previous night.
Tip: Never type "rm -rf", do "rm -rf --one-file-system" to prevent this.