ActivityPub messages are not encrypted, but they could be signed. Signing doesn't prevent edits and deletes.

Yes, if someone has unsubscribed they are unlikely to be notified about the deletion.