>Also, all their tags are immutable, and so can't just be deleted to hide things

Yes they can, they can remove the release and then remove the tag.

>If you delete the immutable release, you can delete the tag, but you cannot reuse the same tag name.