Adding auth.deleteUser() function - contrary to auth.admin.deleteUser()

[jonashaus]

Problem

Currently, deleting users from the application is only possible

1. through the auth.admin namespace (Documentation)
2. with a custom SQL trigger (Documentation)

This is quite a hastle compared to the otherwise extremely well-done auth developer experience.
In addition, this is probably unsafe because it is unclear to me if cascade etc. is setup properly on other tables in the auth schema that reference the users table.

Potential Solution

I believe that there should also be a deleteUser() function within the auth namespace. This function should trigger a confirmation email to be sent to the email address, just like during signup-verification or password reset.

Question

According to my understanding, this should not pose additional security risk compared to a password reset as users would only be able to delete their own user. What do you think?