It's perfectly valid to call ::data() from within beginRemoveRows, proxy
models will do it all the time. Also at the time of calling rowCount()
should be correct at the time of calling beginRemoveRows, this throws an
assert on Qt5.11.

This patch follows the normal beginRemoveRows / actual removal /
endRemoveRows policy.

Data insertion is unchaged in this patch, it's less of an issue to have
data before you announce it than the other way round.

Plasma stayed up for more than a few minutes