Obviously, this applies to all networked applications—not just games. It's embarrassing how often I see web apps which use something like Firebase with absolut

Obviously, this applies to all networked applications—not just games. It's embarrassing how often I see web apps which use something like Firebase with absolutely no validation or access control. Often the developers behind them don't even realize they have a problem. Their excuse is that "most users wouldn't have any reason to hack it, so why does it matter?" Developers need to realize their clients are inherently in the hands of hackers. Any security needs to be done on the server if it is going to succeed at all.