I am a firm believer that some sort of functionality for admins to be able to permanently nuke a post from the DB needs to exist in a 1.0 Discourse release. The current functionality is very good for 99% of the use cases and I like how it’s baked into versioning.
However, there are definitely some extreme circumstances where the content of a post needs to be completely expunged from view by anyone. Sometimes even long-time posters will go too far and post something that they don’t want exposed online, even if to a handful of people (i.e. the admin team).
I realize implementing this has ramifications for all sorts of counters and data in the backend, but I think it’s a pretty critical safeguard for the forum owner to have in their toolset.