At the moment, the API token still remains active when an Atlassian account which created it is deactivated. Although the API token cannot be used anymore, it still shows up in Security > User API tokens.

Suggestion

Revoke the API Token automatically and remove it from the Security > User API tokens when the Atlassian account which created it is deactivated.