One large concern about the action to be taken against players is that the exploit began being looked at/being used only after someone had contacted a GM in-game about it, and when asking about whether or not it was against ToS, was told that the GM could not say if it was or wasn't. If there's so much disconnect that a GM cannot say if it violates any of the game's terms, with no client-side adjustment, I think anything past a 24 hour ban would be absolutely insane.