If they use a super conservative amount of time, then I see no harm. I think it's fair to say that if someone hasn't logged in in 3 years, then they're not really gonna wanna keep that name.