They only suspended the accounts of people who did it way more than necessary to test it. The exploit process degraded server performance, which got in the way of other testing. It makes sense if you think about it.