It was actually true that multiple installs per user would count multiple times, but Unity rolled back that decision not long after announcing it. However, install bombs will still be possible, I seriously doubt Unity has a fool proof way to accurately identify the same user over multiple installs if the user is reinstalling maliciously to cost the developer money.