RMT and Botting Out of Control

[DSN]

So what would you suggest? I mean SE are doing what they can do. Please tell us what you would do?

Compiled binary code is harder to disassemble and reverse engineer than clear text .lua scripts packed in .dat files for starters.
Encrypted Signed Requests to and from client and server so they don't just accept any command given to them over a common web protocol that anyone can sniff and replay with a little know how - Similar to OAUTH or hell even FB API request signatures.
Protection of the shell window itself so any simple programmatic method to send keys to a external application are better detected and blocked.