Two things jump out at first glance:
- what happens if the user wants to undo but loses the race? At that point the system has deleted a record they WANT back
- what happens if the system goes down (for instance, because a new version has been deployed) during that 10-second period? At that point the user requested something be deleted but it will NEVER happen
