yes that's the idea. In practice however, a user doesn't type 'dnf erase -y kernel' by accident and we don't feel the need to protect users who really know what they are doing from doing so. It's the same situation as 'rm -rf /boot' or 'rpm -e --allmatches kernel'. Of course, people are welcome to write specific plugins to achieve something similar to what Yum used to do.