Am I misunderstanding something, or is ISR G2 licensing basically just the honor system?

How I currently understand it:

1. [Technically optional, but ethical] Buy the license
2. Enable evaluation for said license
3. Convert license to right-to-use.

No dealing with any PAK import or anything?