Bitcoins are very abstract.  The definition of "destroyed" gets fuzzy here.

Blocks claiming less than the full possible reward most closely fit, in my opinion, the concept of destroyed.  These coins can only be recovered by a change in the protocol.*  Also in this category is the permanently unspendable coins from one or the other of the two blocks that had identical coinbase transactions.

Coins sent to keyless addresses are the second best fit.  No one has ever known a privkey that could redeem those coins, and so we have no reason to believe that such a key exists.

Coins sent to keys that were generated but then lost is the weakest fit.  We know that a key to that address has existed in the past, and so there is every reason to believe that the key could be found again.  Thermodynamics blocks us from doing so, but math itself doesn't bar our way.

* Such a change may not be completely crazy, but is still really unlikely.  It wouldn't hurt much to allow miners to claim some fraction of the coins lost through this method in the past.  Of course, it wouldn't help much either...