Active statuses can be deleted via the URL

To replicate, open the URL http://localhost:8081/secure/admin/workflows/DeleteStatus!default.jspa?id=6, where "6" is the "Closed" status active in several workflows. JIRA will display a confirmation message then allow you to delete the status which has unpredictable effects on the workflow.