We have a client site that has been getting a lot of spam registrations. We're turning on purgePendingUsersDuration to help deal with some of these automatically, but I was planning to go into the database to delete a bunch in bulk directly (since there are almost 200 of them)

Is it safe to delete them just from craft_users and craft_usergroups_users tables? Are there other places I should watch out for?