The first rule is you don't delete user data without consent. The second rule, is you dont delete user data without consent!
And yes, I work in the industry. Bad shit happens, and data can be lost. But trusting some automated 'spam detection algo' and making actionable, irrecoverable decisions on fuzzy math is completely idiotic, boneheaded, and fucking stupid! If you're in that product team, you deserve every shred of scorn you're getting.