Companies ideally want to stop fraud at both ends, but I would be more upset if, for example, my Airbnb account were fraudulently deleted than if someone fraudulently made one in my name.
Granted, deletion requires access to the account in question, so maybe that's enough of a hurdle already? In that sense it's already harder to delete than create.
I tend to agree that that is enough of an additional hurdle, but note that it conflicts with
> I agree that it should be just as easy to suspend your account as it was to sign up, but irretrievable deletion should be harder.
It's definitely not appropriate for any unauthenticated person to be allowed to suspend an account. You need the same hurdle on suspension.
I think it would be reasonable to have a grace period between the deletion request and the actual deletion, during which the account was retrievable.