this is most definitely a serious concern.
I use blesta billing for automatically provisioning of services for this CWP server.
A few days ago, Blesta did something i was not expecting and automatically canceled a live user account on this CWP server.
Fortunately, CWP did not delete the service...which has remained a functioning website, however, any user interaction with CWP is met with the "account suspended" notice when attempting to login.
Root CWP user can still see and interact with the file manager however, zip files cannot be downloaded from the suspended user account.
Root user is able to upload and download normal files without issue...just not zip files.
Root is also able to download a backup of the mysql database from suspended account with phpmyadmin.
Can someone else check this to see if they also experience this problem...or if its just my system.