If you block ALL a person's accounts then none of them can be retrieved by accessing any of the others. And if your "security concern" is that none was used for over a week, then WAS used after that - I was AWAY for a week with no access! If you expect me to use an access code EVERY single time I open up an account (or alternatively keep my browser open all day, which is security-stoopid) then you make users angry enough to change providers. Not a threat, just sick and tired of being treated like an idiot!!!