As far as I understand it (I never fully read the ActivityPub spec, so I’m talking out of my ass here), it’s impossible to completely delete data because some instances might choose to ignore the Delete request, keeping the data on it’s internal records.

Not sure what they’re addressing other than comment/post permanence. I don’t totally see how that’s a direct connection to privacy