Just a reminder that even if you managed to amend those commits and force-push, the commits would still exist and will be addressable given the hash is known.

Couldn’t you expire the reflog entry and prune the db to remove it entirely?

Can't they be purged if they are dangling and the housekeeping is ran?