you also can look at the connection logs and see all of it happening, i remember when i looked at it and it says prod-3 or something for the bungeecord
The answer is:
they can't
I think letting cracked players join would create alot of problems with PlayerServer unless they heavily modify it or something