This is nonsense. While you cannot keep personal data lying around forever with GDPR, deleting accounts after 6 months or a year or inactivity is a choice being made by the company.
They could equally well have said that an account which was inactive for 2 years, or 3 years would be deleted and still be legally compliant.