get(). is_active/is_blocked aren’t settable through this method - those are stripped server-side unless the caller is already an admin, since letting a user reactivate or unblock themselves would defeat the point of the flags (see Admin access).
