It’s not, and they don’t. This is a cat and mouse game. Apple is free to block these and people are free to keep trying to get around it. Everyone should be acting in good faith
They (Apple) don't accept requests without a valid serial #, but Beeper Mini is working (for users without iDevices), so there's some kind of exploit, no?