yeah, this is all subjective and up to service providers to decide how/who to serve or what to require from a "banned" user to be serviceable again (i.e. could be POW, could be paying, whatever, up to the market to decide)

Im just not sure what's the right way to decide if a user maliciously or rightfully devoted payment (maybe because he just got nonsense data). As a service provider, you probably must have a way to decide this algorithmically or else it would be too much effort.