While i do enjoy my guild exclusive plugin, I made my vote yesterday in a form of another suggestion . If you really want to end the complaints about spybots you have to go wtih option 2.

+1

Closing down the Lua API won't prevent it. The Lua API already blocks ship controls like up, down, strafe etc but with a bit of time with Ida Pro you can re-enable them. Similarly you could write something which just injects keypresses directly into the Windows or Android buffers. So you will never prevent this kind of abuse only make it more effort.

This is why you need game mechanics to counter this. Rule #1 - never trust the client because it's not under your control. My company works closely with some of the major game studios and they spend millions on trying to secure the clients against both piracy and cheating through unauthorised modification but they don't rely on it, they also have server side monitoring and detection.

Slash, you misunderstand the issue. Whether flight controls exist is irrelevant, if the radar information isn't easily accessible. Without the data API, it becomes a very different challenge to acquire the desired data, as described earlier.

We don't explicitly trust the client. We've been at this longer than most. But this isn't actually about client-trust, just the difficulty of aggregating and redistributing information.