In some environments, like ours, users don't go through the normal active -> disabled -> deleted lifecycle. We just remove users from HelloID SA after their last day (technically, HelloID provisioning removes a group membership and this causes their SA profile to be removed from LDAP synchronization).

It seems that user deletion doesn't cause their products to be returned. As deleted is the next step after disabled, I think it really should.