Comment by jhurewitz

Absolutely. The default position should be to remove the personal data where it is possible. But in instances where it the data is necessary for the stability and integrity of the codebase, it should remain.