In messaging with support, they advised that the system would 'automatically' identify the account as compromised and eventually block it. This doesn't seem that likely so I will ping them again in a few hours.