What I don't understand is why they allow deposits before disablements. I'm sure for most of the cases they can already know which users are going to be disabled even before they deposit.
So they can hold people's coins hostage and essentially blackmail them for their personal information.
Yep pretty much this.