Note that the data loss occurred at least partly because the customer was provided with very much pre-beta offering that essentially didn't have all of the control plane done yet.

That's honestly a very hard issue to track because such legacy setups often can slip by later tooling, in this case the part where it was set to "auto expire" after certain time, but instead it became a production environment.