The %post scriptlet of the sm RPM runs "service sm-multipath start", when the package is initially installed but also when it is updated via RPM.
Apparently, from what I understand of the situation, this probes all SCSI devices (except those blacklisted in multipath.conf). This killed an XCP-ng user's tape robot that was connected during such an update (deviced is "bricked").
See this bug report: https://github.com/xcp-ng/xcp/issues/232
There was no such update to CH 8.0 so for now there's no danger for CH users. However, such an update could be released in the future and then the same could happen to your users.
Our user suggests blacklisting sg[0-9]* devices from the probing to avoid this issue in the future.
This is not really my area of expertise, so don't hesitate to tell me if I'm wrong about something