Hello,
1 example of ACLs not really respected:
When a subscriber is moved to a ES profile type he gets the ACL to create x page(s).
When this subscription ends the Profile Type(On Subscription Expire) does not allow to create any page (0 page allowed)
But if a page has been created it is still visible and accessible, these pages should be unpublished and require a subscription renewal to be published again...