Hi, PL-funded founder here.

This was one of the things that made IPFS a non-starter for us. We ended up grafting Hashicorp Vault into kubo (the go-ipfs implementation) so that we could use IPFS and have things like detetes and access revocation that actually work.