A .docx is a package, not a single document
The format is a ZIP archive containing XML. The text lives in word/document.xml, images in word/media/, comments in word/comments.xml, and document properties in docProps/. Once you know that, it is clear why some things survive a "Save As" that you might expect it to remove — they are separate files inside the package.
What Word stores about you
docProps/core.xml holds the creator, the name of whoever saved it last, a revision count, and creation and modification timestamps. docProps/app.xml adds the authoring application, total editing time, and a Company field taken from the Office licence. Internal usernames and machine names routinely leak this way.
Comments and tracked changes are stored separately
Clearing document properties does nothing to review history. Comments are their own part of the package and tracked insertions and deletions are marked up inline in the document body. If the concern is that a recipient can see who objected to what, that is a separate cleanup step from removing metadata.
Cropped images keep what you cropped
Cropping a picture in Word is a display instruction. The full original image usually remains in word/media/ at its original resolution, so a cropped-out face or an adjacent column of a screenshot is still recoverable. Compressing pictures with "delete cropped areas" removes it; nothing else does.