That won’t work for a lot of scenarios. A deactivated user just needs to attempt to login, then click the link in the activation email that Discourse sends them.
I think that either suspending users or changing their group memberships when a subscription expires are the only ways to deal with this.