The Closed Account Orders

Customer accounts marked as closed should no longer be able to place orders. But 13 orders came through on accounts where the closure date is before the order date — a stale session token persisted past account closure and allowed checkout to complete. One edge case: a same-day order placed before the closure timestamp is legitimate.