Workflow or plugin for deleting files after download

I actualy have the very same need for a security compliance request. This is to have a special incoming/outgoing system that won’t keep any file more than the required time to exchange them since those are confidential.

Still struggling with download, i don’t see how to trigger in workflow an action once a file is fully downloaded.
I use downloadlimit so the share link disapears, but i would like the file itself to be deleted and didn’t find yet a way to do it.
At least it it could be tagged as uploaded and then use retention to remove it. But i don’t see how to tag it on download.
Can we even be sure that download actualy did complete on the server side ? In facts even if is not possible, having a delay between download notification by external link and removal will be enough to answer to compliance request.