Their posts will get deleted along with the first one (if it gets reported and dealt with). So you shouldn't really run into that problem.
Locking a thread in this scenario is a good idea.
One question though. How long does something need to be inactive for it to be considered Necro-bumping? I nearly reported one this morning that was last active in January. It was a pointless post but I wasn't sure if the thread was old enough to qualify.
Edited because I slightly misunderstood your question the first time.