I don't know about other providers, but I don't how the handling of any false positive from flagging is to not give any warning beforehand, destroy all instances, and not even give a courtesy mail after destroying all instances and locking accounts. I had to hear from a user that our site was down...(we were also in the middle of an expensive bio related computation that was 3 days in when all was destroyed)