I wonder how careful they were to distinguish between someone who cleared their cookies, and two people behind a nat. It's possible that the number of people abusing their system was smaller than they think.