At least the only action I was still able to perform was to refund the user, or paypal would have just kept the money.
It's just OpenClaw people claiming "Anthropic told us it's fine".
What's not allowed is grabbing the oauth tokens and using these for your own custom agent, which is what was (and still is) banned.
Nothing has changed, this appears to just be a giant misunderstanding (and probably a poor choice of words from Openclaw).