Wouldn't be nearly as much of a problem if they didn't cheap out on the multiplayer and make it P2P instead of hosting proper servers. Valve's Source engine has been leaked half a dozen times and I don't think there's ever been a client-to-client RCE ever because servers are fully authoritative and clients have very limited control over what happens on the server.
