It misses the most important information: why.
The CNIL (French privacy regulator) slapped Discord in October last year because they never deleted accounts (hi GDPR).
Since then, all tech companies are hurriedly designing a plan to mass delete inactive accounts.
It's possible, I've been tricked last year by a similar attack (the sneakiest attack possible to target privacy people, imho).
I praise IT Security for putting so many safeguards, sandboxes and verifications!