How would US vendors prevent people from outside the US to acquire the software?
They put a notice above the download link that said it was illegal to export to certain countries. Really. The onus was on the person downloading the software, not the person providing it.