1) made server side, so can't be blocked by the client
2) only made to prompt people to update their payment info if needed