This looks like a Discourse bug somehow. The user with the 9 GB of files has the same 13 files that were uploaded as a set repeated 1728 times, i.e. 22,464 duplicate file uploads.
I’ll raise a bug and hopefully we can remove these plus stop it happening again.
Bug is reported here. Will welcome any help/advice