You can definitely pirate IAP. Back in the day it was as easy as using a proxy. Nowadays you need to inject 3rd party software into the app.