All NFTs are is a token on a blockchain. People might decide that having it let's you do other things, but that's all it is really. That's not being taken away from anyone.
It's up to the organization or society or code written in smart contracts whether they want to honor, and how much they honor, the promises made for having possession of that NFT. It's really no different than any other organization out there for any service.
I can buy a ticket to a concert and be denied entry as well, or the concert be cancelled, or the company goes out of business, or any other manner of things. I still have the ticket, but it no longer provides the benefit associated with it.
Additionally I can go to the concert, and then try to sell the ticket to someone else, possibly claiming that it will let them get into a future concert, and that buyer needs to verify that the legitimacy of the ticket before purchase.
Or someone who buys a video game that's basically just a case with a code to download the game from a store that then redeems the code but sells the game to Gamestop with a no longer valid code, and Gamestop puts it back for sale even though it's basically useless at that point. That's kind of what's going on with people putting those old Premint passes up for sale on the secondary market.
You could argue that organization should not be trusted with future NFTs or be sued and punished, or the person who sold the now defunct NFT be punished, and that's fine, people no longer patronize or sometimes sue organizations or people all the time when they've been wronged somehow.
As for Premint, they do want you to buy directly from them and not from the secondary market. That's what they are directing you to do. I don't know too much of the details of Premint but they probably wanted to upgrade their service and used older smart contracts without update capability built into it, so the contracts were immutable and limited in some way.
So they needed to issue new smart contracts that had better capabilities, and in the process it rendered the old contracts obsolete. I'm guessing, I don't know, I'm not a customer and I don't work for them, it's just a service some people I know were considering using at one point since it's huge and has a large network of users and one of the things their service helps with is limiting access to bots, which is something the people I know cared about preventing, and is difficult to prevent, at least currently, in web3.