Though I do like your way of thinking. Potentially, if there really is a violation (which there was not in this case, but just an example), then, in theory, the company can implement a system that allows users to still access the content, but remove interactions (e.g. in the case of fraud, remove the ability to transact, etc.). Of course, this requires resources to implement and maintain, so it's unlikely to happen.