Another problem is that for many years, a user will have been signing up to accounts with their gmail email address. If this address is locked, password resets become impossible. I'm hoping that address reuse never becomes a thing.
> I'm hoping that address reuse never becomes a thing.
FYI, it already is for yahoo. I got lucky that they _only_ deleted all my emails after I didn’t log in for a while, and nobody else managed to hijack the account while I was gone and password-reset all my services...
