It sounds like it wasn't a breach of DGC servers, but rather players using not-very-secure ways of storing stuff.
The way I see it, from a Cyber Security standpoint, the admin team shouldn't have called it a "gaping security hole", more just a very bad case of user error. However that being said, the admin team really did everyone a solid by wiping the /drawcash command codes.
If its something else, then it may as well have been a security hole. Something like default RDP passwords.
Power does not corrupt. Fear corrupts... perhaps the fear of a loss of power.
