Indefensible
"Nor had it explained why a customer account that had been inactive for eight years wasn't deleted after the customer walked away."
The email account was linked to a customer account. That account no longer exists, therefore the associated email account could and should have been deleted.
There is no need for TalkTalk to require the ex-customer to identify themselves in order to authorise what should be automatic internal housekeeping.
How on earth do they manage to provide any sort of service?