A concrete use case for burnedBy, now in its own thread: ERC-721 Composition Extension. Each token holds assets in a container of its own that stays locked while the token exists; after the burn, the container opens only for the address burnedBy returns. It is the case where the burn and the release come apart, discussed earlier in this thread, and it also rules out re-minting a burned id, so the record never changes once written.