Managing Workspace users - removing users that aren't defined?

The Terraform Google Workspace tutorial gives a useful example of how to add a CSV file of users to a Workspace domain:

However, this doesn’t remove users that aren’t defined in the code.

Is there some way to have true infrastructure-as-code, where users not defined will be removed as well? Or what is the idiomatic way to tackle this in TF?