This all seems sensible. For the latter case, could you keep the data but detach the username? So someone could log in and see/export their data, or set a new username?