"IsDeleted"'s existence is the biggest lie tech companies tell media government and consumers alike.
Also, I have zero confidence that any of the big tech companies thoroughly delete data they've obtained even if it's illegal to keep. Big tech companies aren't exactly known for following the law. While GDPR sounds nice in theory, the U.S. based companies might "delete" the data from E.U. servers, but conveniently keep backups in the U.S. Or they might forget to pass on the delete request to trusted third-parties.
It's definitely doable and if they're not currently doing that because they choose not to for sure, though deletion of highly-relational data like this is an interesting problem, idk I wanted to bring it up (: