Currently accounts with no last_login date (because no `password` was found) are treated as recently logged in and never get deleted: https://github.com/chatmail/relay/blob/b000213c68bb91e80a217ea96c33033a373638d4/chatmaild/src/chatmaild/expire.py#L129