I think you'll find it penalises link SELLERS and only buyers indirectly when links that are 'found out' are devalued.
Otherwise i could just go around posting on forums as a competitor (you even!) promimently buying links and leaving a trace to my (your) site and then ratting you (myself!) out to Google.
The whole thing is a sham. Google has no way of filtering or stopping all links without a major overhaul of their algo, instead they resort to picking on high profile sites in an attempt to intimidate webmasters.
Carry on people buy links, just be sensible and careful about things.
DON'T LEAVE A VISIBLE TRACE OF ANY LINK PURCHASE AND DON'T DEAL WITH SITES THAT DO!
On the subject of link exchanges being dead, plain wrong i'm afraid David.
http://seoblackhat.com/2007/10/16/reciprocal-links-still-working-great-in-moderation/