If they can make a 6 Million $ lawsuit, of course they'll be able to fine it.
But in most cases, flashing back to the original firmware completes the "perfect crime". But moral issue still remains, as others said.
IMO, they won't even check the firmware. They will just receive one and send the customer another one. I even heard of someone who found that his replacement drive was equipped with a hacked firmware.