I would call out that this approach does allow you to identify and freeze users but if you then use then use the same approach to unfreeze users then you need to be aware if any users have been legitimately been frozen. Otherwise you end up in freezing users that should be kept frozen.