Let's go a step further: if we're worried about data persistence, should the table also be append-only? Soft deletes won't protect against a user manually wiping every field in their account.