Google has an internal policy of not talking about anything related to enforcement. They've banned and ghosted their own business partners, not to mention their own employees' husbands, with zero explanation. This isn't anything new either; you can find examples of it going all the way back to the company's founding.

The underlying logic seems to be to lay traps and pitfalls for bad actors to fall into rather than having a transparent and evenly-enforced set of rules. i.e. if we tell scammers they can't use privacy cards, instead of just silently banning anyone who uses them, then how can we tell scams apart from real users?