Private groups and DMs with forward secrecy (like Signal) I think will be useful here.

FWIW, there is a delete event, however it's up to relays to honor it and I believe the event is stored for a duration of time still.