What happens to a user's real name and email address when they disable their account? I assume this is in response to the break in, in which users raised larger concerns about their information after they abandoned the site than just accessing their account.
Is this just a stop-gap to a better solution in the future? It seems to me that the long term the goal should be to create a "Disable" button that erases that users real name, email address, and password. And maybe that users home node for good measure?