[jeffalyanak]

It's much harder to hide the fact that you have closed an account completely and much easier to put in a periodic check that the account still exists.

The difficulty with ransomware is that—without object lock—you would need to check that all data is still valid. That is usually going to be very difficult to do and any heuristic checks are liable to miss some cases.

On the other hand, checking that an account is still extant is easy and, since that's an operation that should not be undertaken without a whole oversight process, you can significantly limit who has the permission to do so.

[tgsovlerkhgsel]

Oh, I totally agree that this solves at least 99% of the problem. I'm just wondering if this is an edge case that remains.