I've deleted files from a spaces bucket, and the CDN still serves them for a while. I believe this is counterintuitive and dangerous from a security perspective. I counted with the deleted files to not be accessible anymore yet the CDN still serves them.