Destructive Identity Operations Explained: Login-Method Removal and Full User Deletion

Short answer: treat login-method removal as a recoverable credential change, but treat full user deletion as an irreversible, observable workflow that revokes every session before personal data is erased. The page says gdpr_delete_stuck, and the on-call view is uncomfortable: the identity row is gone, yet the session-validity probe still accepts a...