For some of our users, this could be a massive performance impact for them given the size and volume of their audit tables and schemas.

I see your point, but I think of an optional, disabled by default, feature: the documentation may stress that enabling it would have a massive performance impact, especially on large datasets, with the additional caveat that the choice to enable it is a one way trip, because of the data integrity corruption caused by deletions.