I would argue an even worse situation are apps like Wyze camera that really need notifications enabled to alert you to camera movement, doorbell usage or other pressing events.
They have an option to opt out of marketing notifications but they ignore it if you check that and still send sometimes daily notifications of sales through of their crap.
I can't think of a business I've worked for where PayPal hasn't done something like this in some way. Best thing I can recommend is complain to your state regulatory agencies. Even a one week suspension can be a major headache and revenue hit. It's incredible to me that they haven't been hit with more scrutiny given US banking regulations.
It's absurd - the flexibility to even match Expedia's rates is a slog and they act like you're asking for the world when they readily accept Expedia giving even less. Really don't understand why hotels don't bake in the flexibility to actually compete with the OTAs.
This isn't limited to Google. I had a paid for Hotmail account back in the day, someone attacked a domain I held, and as part of that sent multiple abuse reports to every tech provider I used. My Hotmail was listed on the whois - Microsoft removed the email account, didn't refund and provided no human support that I could get a hold of to get the wrongful termination looked at.
It was a nightmare and a good reminder that an attacker with sufficient resources can create more issues than you can possibly dig yourself out of.
They have an option to opt out of marketing notifications but they ignore it if you check that and still send sometimes daily notifications of sales through of their crap.