Locked/Disabled account are not completely disabled/locked

If you need to block everything the choice is the account deletion. The lock/unlock generally prevents logging in; we’re discussing also how to delete its data: Change (or not) the user's data deletion policy