They said it’s caused by database corruption. Easy enough to imagine that the thing tasked with doing actual deletion just couldn’t traverse to all of its targets.
I like this theory. I wonder the "Delete after 30 days" part used to work and then they added some more security features which made it not work unless the phone was unlocked. i.e. it could delete out of the DB but failed to delete the file if the phone was locked when the job ran.
10/10 PR Spin. I love the answer and can sleep well.
Yeah, though it's plausible that database corruption could just mean "the deleted flag was accidentally unset."