The part that would bother me most is not the ban itself, but having no idea what to change. “Policy violation” could mean VPN, billing risk, location, or actual usage.
Not defending it, just sharing perspective from having worked on some fraud/abuse mitigation projects.