I suppose could implement it by requiring a deletion token that is returned when making a deletion request which doesn't have its own deletion token, but why wo

I suppose could implement it by requiring a deletion token that is returned when making a deletion request which doesn't have its own deletion token, but why would you? That's something for the frontend to handle.