No abuses or cheating should be tolerated, regardless of whether there are security breaches involved. The same argument applies: whenever you allow some kind of cheating, bug abuse or what have you in order to gain an advantage in Strat, then you're encouraging continued abuse, and over time it leads to a constant escalation of ugliness in the game.
The problem with rules against "exploiting" is that unless there's a specific rule written about a specific exploit, the line is extremely muddy. Check out the Merc vs BRD debate regarding invisible walls for example.
When your spawn is behind an invisible wall: Are you breaking the rules if you stand behind it and shoot enemies?
Are you breaking the rules if you don't attack from behind it, but move behind it to reach a better exit position?
Are you breaking the rules if you don't attack from behind it or move behind it, but wait behind it until the enemy can be repelled before you move out?
Are you breaking the rules if you position your army up against the invisible wall, thus cutting off the enemy's opportunity to flank you from behind?
Are you breaking the rules if you use a tactic that doesn't directly utilize the invisible wall, but that would be infeasible if the wall was not there? (e.g. not caring about protecting your spawn)
This is a classic muddy line, and unless specific rules are made describing exactly what you are allowed to do, rules against "exploiting in general" won't solve the question. There are hundreds of game mechanics and bugs like this that can be abused to some extent, and you probably can't write rules for all of them.
Hacking, on the other hand, can be easily forbidden with a single rule: Accessing another player's account without authorization is not allowed. The line here is pretty clear cut.
Cheating also, can be relatively easily forbidden: Using a third party program or game file modification to gain access to in-game information you would otherwise not have access to is not allowed. Using a third party program or game file modification to automate actions is not allowed.