Extremely important. The current design not only allows for security breaches, but can also result in hours of time to weed through all accounts to remove inactive users. There should be a way to delete a user login account based on days since inactivity.