If your users are very vulnerable make sure that you don’t have the data to expose them ever.

aka disable any logs or delete them automatically, periodically.