PDFs do have a "burn and destroy the parts/layers below" as part of the spec meant explicitly for redaction like this. Apparently they didn't use it, I guess?