I think a reasonable counterargument to this is a theoretical internal outage at iCloud and one or more machines storing data needed to be restored from backups. The backups contained "deleted" photos from before users deleted them.