Not to mention, how do they verify that was truly his email account?

If they give this one up, then there'll be a flood of scammers sending Yahoo death notices in an attempt to gain control of accounts.