Customers can’t restore anything from trash. They’d have to upload new data and delete for the “attack” you suggest. Which has no benefit to them and quite a bit of cost and effort for pretty much no effect.
It wasn’t. This was garbage collection which hasn’t run for a while. It’s merely cleaning up (unpaid) data nodes should no longer hold.