Maybe a preflight check would fix it. If the user has not previously formatted this drive and it is not empty, the restore process does not start. It ends with a "Drive must first be formatted" message, or something similar.
If someone formats the wrong drive, anyway ...
I would probably use the same function that populates the list of drives when adding a new filesystem (which means they should be wiped). I will just have to test what kind of issues would be created since the filesystem label and uuid would be the same as the running system.