Is it just that you don't want to take the time to sift through to hard delete them? Because I don't see much of a point of leaving them to be resurrected.

<script type="text/javascript">alert("remember when scripting attacks worked?");</script>