@Gargron What worries me more about IPFS is that many people don't seem to realise that your node publishes provider records of any stuff you add - this means that you cannot rely on just keeping the IPFS hash private, everything you add will be announced to the world unless you encrypt!

I think default encryption will be the way forward for IPFS - that would also help against your delete worries a bit - if no one has the decryption key anymore a file is as good as deleted.