Update #2: Both preauthorisations have now been cancelled.
Will update once/if there’s some confirmation of what the core was/is and when/if it’s fixed.
In the meanwhile, they also accept payment via (spit) PayPal and invoice. The last of those is likely the safest option until this is properly sorted.
I’m going to try that now.