It's pretty stupid that big customers like Railway are not somehow protected from this.

I think all customers should be protected by at least one CSR doing a quick approve before banning the account.