That’s what I was thinking of when I said I tried disabling the user, apparently it does nothing other than put a line through the users name.
Maybe I’ll keep a list of incorrect email addresses and delete them every day via a script, eventually they should stop appearing in an emails CC list and be gone for good.