I agree with you there.

I would think Google penalizes the sellers, and only if they can nearly 100% confirm that the site linked to initiated the link, then the link buyer.

In the past Google would just take away PR from link sellers, but not de-index them.