Still it should probably be fixed before you get a letter from a lawyer about GDPR violations.

lemmy is in a weird spot generally with the GDPR in a way that we can’t really design around tbh. in any case this is almost certainly a general lemmy bug or something being caused by what we did to come up after the XSS issue because we haven’t tinkered with the delete account settings. someone also just tested self-removing as mod and replicated the weirdness you experienced there