They've got 30 days to delete data, there's no excuse not to manage it within 30 days.

Also, you're saying they intentionally built a software stack without even thinking about how to obey the law (the 30-day deletion requirement existed even before the GDPR, since 1996 even, just with lower fines)

I hope in a few years this case will be taught in school just like the Therac case is being taught right now.