> I'm pretty sure they could simply add to their terms of service "no refunds for crypto purchases" and that'd be understandable, legal, and enforceable.

It definitely wouldn't work. I'm sure they have similar conditions for "don't read your PIN out on the phone" but people still do and still often get refunded for it.