Isn't there a way you can do a check with their IP in addition to their hash to identify a certain player? Sure this will not work in the long-run for checking full stats on a player (since many ISP's rotate IP addresses frequently) but for a per game basis it should work fine.

So pirates would not be allowed to have a complete account with full tracking (but can still view stats from a specific game), and legit hashes could completely track their history.
I might be missing some pieces, this is the first time I've really checked it out.

Also it would be nice if there was another way to add this to a server other than Gandanur, like maybe add a way where you can load an additional .dll package onto a server similar to SAPP, so server admins can easily add this to their server.