Why is hibernate.hbm2ddl.auto=update considered unsafe for production?

It auto-generates/updates the schema directly from your entity classes with no reviewable history, no data-migration awareness, and it can silently drop columns Hibernate believes are no longer needed. Flyway/Liquibase replace this with versioned, reviewable, ordered SQL migrations that are explicitly tracked and never silently applied.