From a technical perspective, here's a strategy I used in the past: In addition to having a simple activation check in the code, I actually created/identified s

From a technical perspective, here's a strategy I used in the past: In addition to having a simple activation check in the code, I actually created/identified some constants that are critical to the internal functioning of the code, and hashed with a reversible hash function. Then, when the user gets activated, I used that as one of two pieces to recover the hash function to decode those secrets. Still circumventable, but requires more complexity than simply skipping the activation check, because simply omitting some code doesn't cause it to work.