> almost everyone I have ever seen will either force-ignore/auto-accept host key changes,

Thanks for the super informative answer. About the quoted portion... yeah! I assume it's my responsibility to do something... like manually check the host IP or something? What is the recommended practice to deal with this situation?