As with Bruno, it's the trust feedback as you have done, the Default Trust or a Flag.

Either way @theymos should place some sort of "This Account is permanently inactive" cautionary warning across the page (and remove the email used for recovery) and use a 20+ random string to lock the password as well.