From what I understand, apparently it's a consequence of having everything handled server side. When you get something like a new item, an achievement, a friend request, or whatever, the server confirms it and attaches it to your account. Sadly, this leaves an opening for hackers because this...