if someone only have the .amxx and try to avoid the ip check, need to have basic knowledge about amxx and amxx dump/uncompress. Its not just enter to internet and magic happens, or paid to someone able to do dat.
Its a very basic "security" ? Yes of course, but some times its just enough
Why would someone have the amxx and not the sma? The license forbids distributing plugins without source.