I didn't think about it before, but it sounds interesting to have another workspace with limited access to do the administration work.

In my case I will go rather with the DEV/TEST (ws) -> PROD (ws) that we use only to develop and execute ETL pipelines.