maybe safer to default to dryrun mode

[juhp]

How about making dry-run the default mode and instead having a --delete option say to enable actual deletion?

That might be a friendlier approach: generally I like to see the affect of running such a command first before doing the deleting.

(Also in the unix-like world -n is a common short form option for dry-run.)