This constraint had a TALES expression making it not apply on invalidated accounts, but during the transition invalidated -> validated, when the account's consistency is checked, the account is still in invalidated state, so that check was ignored, making it possible for users to validate an account without and account type.