Thanks for the links, which do seem to check out. I've marked John's Launchpad account as "deceased", so it's still visible for archival purposes but even if somebody gains control of his former email address it's no longer possible for them to make any use of his Launchpad account using it.