Nobody should be buying these things without escrow. There have already been multiple cases of these scams where people have paid via satoshibox or a similar pay-to-download service only to find that the downloaded files are empty or only contains music/video files.

Even if they were legit, would you really trust a newbie with any amount of BTC going first? What if the script itself had backdoors?