Thanks - I tested this on my own forum and confirmed that moderators can delete users.
For my use case I would prefer that only admins can delete accounts.
Is there a recommended way to prevent moderators from deleting (or anonymising) users (for example a site setting, theme component, or plugin), or is moderation policy normally used for this?