I agree OpenAI has not made it easy to differentiate between users attempting to do security research, which they have repeatedly stated they’re requesting — and attempts to exploit known existing vulnerabilities to repeatedly achieve some activity that clearly violates their terms of service.

Simply put, if you’re reusing known vulnerabilities to break the terms of service, if they ban you, you should not be surprised. If you’re doing free research for them, reporting your novel vulnerability findings to them, not using vulnerabilities you independently found to achieve activities that are clear violations of their terms of service, and not sharing them until they’re patched, question I would ask is why?