One thing is ,the V2 version from the earliest patch was undetected until now. Given their speed on fixing cash shop bugs, they should have ironed V2 out long ago along with V1. In fact, we have people trying unsigned versions on memu or similiar.
There will be always lulls in their security, making it an neverending battle for LI.
Look at PNC, they know hackers are in their game but only ban the worst offenders. Less effort on gatekeeping. Everyone wins.