With the organization data gone, will there be a way to update the retained images, like security fixes etc? If not, than this could become very dangerous.

Really, if they delete the org data and images can’t be updated, it might just be better to delete them all just to avoid these inevitable issues (maybe with a longer delay). Just rip the band-aid off and be done with it.