They know how many installations are active and how many people work for the org. When wildly out of line they could send a lawyer-gram and then shut it down if they don't get a response that accounts for the difference. Enterprise apps still phone home to the mother ship (Apple) and will refuse to run if, for example, the device doesn't have an internet connection for some number of days. (90 if memory serves.)