Excellent comment. I will say this: as someone who has to interact with a system where nullifying and deleting data is a legal requirement for privacy reasons,

Excellent comment. I will say this: as someone who has to interact with a system where nullifying and deleting data is a legal requirement for privacy reasons, I desperately wish that weren’t true. Auditing, tracing, even basic production robustness…everything just seems to fall apart when one can’t follow your model.