Thank you, Richard, for your response which pretty much explains many of the doubts which I had.
All of my doubts were basically related with GDPR, and most of these have been taken care by Moodle 3.5.
We simply can't afford to delete all the data related to a particular user.