What does “crypto-shred” erasure mean?

“Deleted” should mean unrecoverable. On a §12 erasure, NoIdMe destroys the per-principal data-encryption key — the sealed personal data (including in WAL/backups) can no longer be decrypted. It's a cryptographic fact, not a database soft-flag.

Details: crypto-shred erasure.