I don't get why they needed to bother you about this at all.

Every half decent switch made in the last 25 years can be configured to allowlist MAC addresses. Either that, or dropping customers onto their own VLANs is the standard way of managing this.