Yes, those new security checks really help, and im sure they added them coz they were aware of their uber exploit that was there for like 1 year and no one from valve said a single word. Believe me if i tell you it existed is coz I know it did. I actually saw a guy doing it at a lan party, and it worked very well, actually that guy stole a BfBC2 cd key as the owner of the account was downloading his new bought game, then he used it to register it to his email and played the game using the non steam version. Maybe they had the cdkeys long before valve fixed their stuff. Or they just hacked the database for passwords, who knows.
Uh huh, let's not get into arguments about who did what in the past though, the point is.
Check your cRPG accounts security:
1) Make sure it has a password set.
2) Make sure your password isn't "password"
3) Don't give out your password
4) Don't make extra accounts on the same serial, without adding a password that abides by rule number two and three.
General, common sense guidelines, add to the list as you see fit.
Also, in discussion with some other members of the cRPG community, we've learned that if you have a created character that you use for other modifications (Say PW mod? Mount and Musket?) on M&B, cRPG somehow, eventually logs them as characters on your serial without a password. When it does this is beyond me, but
apparently it has happened to some people, so watch the alt. accounts you create.