The ONLY reason that you should avoid soft deletion is that deleting things permanently in a soft-deletion-based system is hard and error prone. GDPR, among ot

The ONLY reason that you should avoid soft deletion is that deleting things permanently in a soft-deletion-based system is hard and error prone. GDPR, among other regulations, requires that you be able to do this sometimes; and it requires that the data REALLY BE GONE. But I really think that soft deletion should be the default unless you think you’ll be fielding user data deletion requests.