There's also the question of whether the original poster was telling the truth, or even told the whole story. If for example, the spreadsheet had a form for the entry of usernames and passwords, and someone came across it (maybe because it was e-mailed out to lots of people), and reported it as an attempted account phishing form, that would certainly explain an account getting suspended for an TOS violation --- and as far as I know, someone who is trying to use their Google account for phishing doesn't get escalating warnings... and I think most people would agree with this.
Should still get better recourse than tapping people you know and crossing your fingers for six days. Even if it's a paid expedited review, though that obviously is a flawed suggestion.