At the moment it's reputational enforcement: if enough people badmouth them on Hacker News, the money will flow to competitors. (There are other ways to enforce norms, but they have their own problems.)