Single post in Account re-activation

This is actually a really good way to handle it! 90 days is plenty long enough of a grace period before "locking" the account down, and I presume if it's flagged as inactive, it still remains clickable by the rest of us (ex - mass clicklists) While not the best security measure by any means...perhaps you could lock the email page down by making us enter in our birthday to view it? It's already a piece of optional data the site can have to give us birthday week clicks/etc and while the day of our birthday is semi-easy to find, the year is harder. 2fa is ideal from a security standpoint but, especially for younger users, is not ideal for everyone unfortunately so I'm just tossing an idea out there.