the ToS enforcement itself is defensible -- consumer plans vs API access really are different unit economics. what's not defensible is permanent ban with zero appeal path for paying subscribers. that's a product failure. if you're charging /mo you should at minimum have a 'we caught you, stop it or we'll close the account' step before 'account gone forever, sorry'.