The biggest delete in our app is one line of raw SQL against a table our ORM does not manage

A census of all 24 foreign keys in a 25-table Postgres schema: 14 cascades, 10 set nulls, no restricts, nine keys pointing at a table outside the migrations, two referencing columns with no index, and a privacy notice you can read the delete rules off.