This seems like a bad idea--couldn't the original owner just come back and reclaim the account via email/account resets?