The whole ReenableDatatype mechanism seems flawed: it's currently used by certain controllers to "recover" from a forced-disable state via prefs (which gets previously reported as UnrecoverableError).

We can do better. In the simplest form, ProfileSyncService should be removed from this plumbing. In an ideal world, we shouldn't use UnrecoverableError for disabled-by-policy.