Typically a strong account team builds processes with other teams (compliance, engineering, etc) that enshrines and insulates important accounts from accidents like this.

In this case, I'd expect major accounts (and maybe Railway isn't above this level?) to be in a protected tier that is immune from automated suspensions like this.

If suspicious traffic occurs that _would_ trigger a suspension like that, the account team would be paged. Because this may mean your important account was compromised, shipped a bug, has been hit by something and you should immediately start working _with_ them to figure it out.

Fairly basic for a company with any customer management motion at all.