Data that has not been overwritten can be recovered. Overwriting the data to counter that would probably be seen as obstruction.

I think a better idea is to do what well run VPNs are doing and not storing personally identifiable information and not saving logs. Courts can’t get something that never existed and it saves the instance host legal headaches.