I think the 90 days rule is to prevent mule accounts used for scam purposes but credit card online account by right shall not be that way if with active transactions.

At least shall email or sms user to inform will be locked before lock.

supposedly to prevent "reactivation" of dead accounts to be used as mules. but mules are smarter than this TBH

public bank also locked my account because "i need to login via browser to count as a login", using app doesnt count (WTF?)