Thanks @Werner Stinckens​ .

"Why? Because it takes too much time and effort to make sure you do not break anything in prod."

That's the bit I'm not getting... if you have a standalone compute cluster dedicated to PROD (and only PROD), and you don't touch the code in the PROD branch outside of releases, then how would the chance of breaking something be higher than in a completely separate PROD workspace?