Why not just ban the user from using gift cards then, instead of banning their entire account between 30 different products under the same company umbrella?

They don’t need to fix insecurity of gift cards, they just need better access controls. Yet they have no incentive right now to tackle that.