Hi Christof,
Thanks for sharing the concern!
Firstly, even if anyone gets the Vendor Code string that is not the problem as still Master Key would be with you.
And yes you can use DEMOMA vendor code for the protection.
Hope that helps!
Regards,
Ashish Kumar