Also, if the data is publicly available it probably is too late for that, and if any knowledge of the earlier existence of the account remains, its deletion alone is suspicious (likely less so than its content)
I would change the password to something really complex (generate a long random string), ask Facebook to delete the account, and destroy the password. Then, nobody can force you to undelete it in the grace period. Ideally, change the email address associated with the account, too.
If you have a safe way to store it, make a copy first (GDPR’s right to data portability helps here). If they have to flee, having one can help getting asylum.