Comment by FeepingCreature

It seems to me the obvious answer to this is "app copy per user" (possibly with os-level dedup) and "undelete"? What do they actually do instead?