I guess they learned a lesson from R4… So, they just need to have a DB of IDs tied to IPs. If an ID starts repeating a lot with different IPs (distributed around the world), they can clearly block at will. These kind of developments may be difficult to keep alive, then. Well, caveat emptor, I guess.