I’d really prefer a solution that did not abuse the password and email address to attempt to thwart access to the account. The account should be suspended/deactivated - it just also should be usable in the autocomplete.
Really, the autocomplete should include suspended accounts given their posts are not deleted and still searchable, so I don’t see why they would be excluded unless they are both suspended and have no posts.