slightly ridiculous but maybe put a `require(_status == _PAUSED)` here. Otherwise whoever has the authority to call `_unpause` will be able to reenter. Which in the Mailbox's case is the owner, so it's not a big deal, but probably best for completeness to have the check