Yeah. Short version is that the eShop does all of its authentication clientside, and that said authentication depends on the presence of a ticket file for each game, on the order of a few KB in size. So people just pirate those few KB through the usual channels and then pirate the games from the off...