You can make a log of deleted users without it containing personally identifiable information, by just storing the IDs.

No since the GDPR exempts things you need for legal compliance, thus a list of users who have asked to be deleted is fine if it's being used to ensure compliance.