Obviously, this applies to all networked applications—not just games.<p>It&#x27;s embarrassing how often I see web apps which use something like Firebase with absolutely no validation or access control.  Often the developers behind them don&#x27;t even realize they have a problem. Their excuse is that &quot;most users wouldn&#x27;t have any reason to hack it, so why does it matter?&quot;<p>Developers need to realize their clients are inherently in the hands of hackers. Any security needs to be done on the server if it is going to succeed at all.