Keeping the data for European users after deletion would be in breach of GDPR, so Facebook does delete data after some grace period. It doesn't necessarily mean physically removing files, but you can do other things like storing data at rest encrypted with with an account unique key and then removing the key when account is deleted.