I installed 28.2 on Monterey via Homebrew (as a cask). I have desktop-save-mode set; auto-save-* options are all default.
Recently, I restarted the computer for updates; apparently I had somehow not saved an important Org file beforehand (although the changes were made the day before and I typically save several times a day). The unsaved state was discarded without warning before restart or offering to restore anything when the file was automatically re-opened afterward, and there is no sufficiently recent backup or auto-save file. (There are backup files, #agenda.org#, agenda.org~, and agenda.org~crash. The first also lacks the critical data, although fairly recent; the other two are months stale, presumably because backup is inhibited due to technically being in Git.)
After carefully reading the relevant manual section, it looks like I got confused by the redundant prompts to restore the auto-save (one phrased to restore the file itself agenda.org, y/n/!/q/?, and the other phrased to restore the autosave, #agenda.org#, yes/no — restore from what? and to what?), causing it to helpfully drop it on the floor. (All other editor packages I've used somehow manage to avoid asking any questions at all when handling autosaves and crash recovery, or needing complicated manual sections for those, but I guess I should have known what I was getting into.)
How do I get Emacs to not drop bits on the floor, ever, without simply giving up all control over file save timing, or needing to fight my way through a checklist to make sure I don't avoid not forgetting to restore the wrong version?