> However for Glacier, it would mean throwing away the disk whenever someone deletes their data.

Probably not a huge concern, given the use case. Glacier is pretty fire-and-forget.

> It would also means constant replacement of disks.

They're already doing that with servers, why would disks be a problem?