+1. No editing, creating, or deletion of entries; no deletion of comments made prior to the time of changeover; however, permit deletion (with or without spam marking) of comments made after the point of change. Or maybe, as someone else suggested, just screening them.

It might be nice if it was possible for the survivors to request either this status OR a completely frozen no-login version. If no one has the password anyway (because the deceased elected not to share it in their paperwork) then it would be more appropriate to freeze the login altogether.

But of the two, if it can only be one - this version rather than what we currently have. Under the current scheme, if my father's account had been here, I would decline to have it designated a memorial account ever (and take the risk of a hijacking) rather than run the commenting risk.