There is also nothing wrong with disallowing bots and banning accounts that use bots when bots are not allowed.

IMO there is something wrong with stealing customers money/assets because they broke an arbitrary rule.
So you find no fault with the people that where defrauding the system? If that is the case I question your ethics.
My opinion is that it was unethical for people to cash out on GAW's mistake but likely not illegal.
GAW's unauthorized charges were unethical and most likely illegal.