Agreed. Or at least, customers should only be liable for expenses they incur up to the hard caps they set.

If you don’t have a mechanism for enforcing hard caps, you don’t get to send customers a bill for unlimited amounts.