This message was deleted.

Not if that's the only change. Resources are replaced only if you change one of the resource fields marked with a red asterisk in the docs (or its name, but that's not really a replace). The protected flag isn't a resource field at all, it's a Pulumi opt.

Ah ok! That's clear, so if my change is simply setting

protect: true

, I can do so safely.