>>Can you provide examples where this has been used in then industry?

Microsoft tells you if you install the game on too many devices.

>>With the examples you listed doesn't it require an account to authenticate first before achieving this?

Uhm, no, that's how it's implemented but it isn't required.

>> what stops me from spinning up VMs or emulators repeatedly to attempt to install bomb?

Nothing, but it would be very time consuming and very easy to detect.