Thankfully I’ve pretty much dealt with sorting out the configuration now.
The remaining point of contention for me is more that this is a terrible way to treat customers, not to mention the security implications of automatically removing a bunch of security features after such a short notice period!
Such a lot of disruption and bad feeling for the sake of 5 days of an expired credit card.