Check properly next time, their 200 lines PowerShell script is downloading some 20k line cmd monstrosity https://github.com/massgravel/Microsoft-Activation-Scripts/b...

But this level of scrutiny is precisely why such DIY security claims ring hollow.

From what I can remember, there are like 10 various routines for different ways to activate different products and most of the code is just boilerplate, no? You definitely can trace the hwid codepath in a reasonable time.