Just as the subject states, is any of the s2Member php code encoded?
I just learned that the MagicMembers plugin is almost completely open. Only the payment and autoresponder modules are encrypted. This raises a flag since you never know whats within the encryption. I don't want them extracting any information via email or something.