I think the explanation is much more simple: it's working because most people aren't tech-savvy enough to figure out the loopholes and feel comfortable using them on a regular basis.
Kind of an interesting form of freemium business model, actually...