Comment 4 for bug 246524

The only place we set the account's status to DEACTIVATED is when the user clicks the 'Deactivate your account' link. At that time the user is also asked to provide a comment explaining why he wants the account closed and, once done, the account can't be used to login anymore.

Going through the password reset workflow will allow the user to login, but won't change the account's status, so the account would not be completely functional. I'm pretty sure all these users have chosen to deactivate their accounts, but we can see that a bunch (233) of them [1] have already gone through the reset password workflow in an attempt to reactivate them.

The two users mentioned above seem to have done that, and one of them (khalderon) even left a comment when deactivating his account:

 status | status_comment | password
--------+-----------------------------------------------------+----------------------------------------------------------
     30 | I have no time to spend with this page. Bye for now | XXXX

 status | status_comment | password
--------+----------------+----------------------------------------------------------
     30 | | XXXXXX

[1] select account.id, password, status_comment from account left outer join accountpassword on accountpassword.account = account.id where status = 30 and password is not null;