How to safely decommission nodes by using cluster-level shard allocation filtering (excluding nodes)

When you want to decommission nodes in Elasticsearch, the usual process is not to just go right ahead and destroy the nodes. If you do, then you risk data loss, which just isn’t what you want to do with what is supposed to be a reliable database.