BUG: A motoko upgrade should never have the option to ignore stable compatiblity errors.

[crusso]

The code here:

sdk/src/dfx/src/lib/operations/canister/install_canister.rs

Line 115 in 5a823d1

if !skip_consent && canister_info.is_motoko() && matches!(mode, InstallMode::Upgrade { .. }) {

is dangerous because it permits the user ignore any stable compatibility errors which may lead to loss of data.

This is more dangerous than ignoring the candid compatibility error, because users can always fix the candid interface with an upgrade, but once data is lost, it's gone or corrupted forever.

Is it possible to skip/ask for consent on stable compatibility warnings only but never, ever ignore stable compatibility errors?

@luc-blaeser - do you agree with proposal?