It feels as if there's some kind of scale at which this ethical obligation evaporates, and it's likely at that same scale where automated 'ban' rules are implem

It feels as if there's some kind of scale at which this ethical obligation evaporates, and it's likely at that same scale where automated 'ban' rules are implemented where only in exceptional circumstances does any appeal reach the notice of a human. There's probably some crossover at which respecting the privacy of the customer goes from being a positive differentiator in maintaining customer relationships to being an inhibitor to an additional non-trivial revenue stream.