Idk why people are saying that ES data is always immutable. They can be by default sure, but if a facility is useful to change the history, why not?
You'd read the cancel events first and simply skip the events they point to.
"Right to be forgotten" isn't the same as "right to be redacted".