The GDPR angle is that this was why they decided to indiscriminately delete inactive accounts. Deceased users are the reason they're delaying it, not the reason they're doing it.