To be fair, It does make you type "DELETE". Maybe extra confirm with a full red screen LOL. But I'm not sure I like the idea of an app authoring a event in my name like that, specially not being a NIP or documented. I think a NIP to handle "account self deletion" to comply with GDPR might be worth doing, if anything because it could describe how to un-delete the account. All these will be very client/relay specific on how it gets enforced, so would be nice to have a way to unlock yourself out of this hole.