theoretically speaking,
if somebody bought a arcade game then uploaded the file from the 000000000... folder on hdd, all u have to do is swap ids and place on your console...
well since you say someone has to buy the game right? what if someone with a jtag xbox unlocked it by glitching it and then posted it for people to download and overright files can that be possible?