Its my belief that any amount deletion mechanism should never act instantaneously, it should disable login, and then create a job into a queue, which runs once a week, once a month, whatever.

Users do stupid things, they do things they dont want, their dog licks their phone, whatever.