I'd be 100% OK with sitting in 1 spot in Central Park NY with the 4 pokestops, catching lured pokemon without moving all day... wouldn't need to move ever...
Figure, if you are on phone/tablet with the legit game & api, can how can they catch us??? If we trick phone into showing location, without moving the gps ever, can they tell??