Deleted user account still in use?

I noticed that user #460797 had apparently deleted their account several days ago, or so I thought. However, new approvals are still coming in from them. I thought that erasing an account meant removing user access completely.
Should it be considered more like a deactivation? And shouldn't it also mean forfeiting approval and contributor powers as well?

Edit: Received a message from the user, apparently it's a bug that prevented full deletion. I was also told that the deactivation was supposed to be reversible. I haven't seen any statements about deactivation/deletion be in the ToS under the privacy policy or anywhere else, so a clarification on this would be helpful.

Yeah, he contacted me about this already. Basically, automated login via cookies on different subdomains still works. It's a bug, Albert knows about it too, should be fixed soon.