I'm not in game yet so I don't know what I'm talking about, but I see there are some sec problems with the client software.
I think the download link should link to a thin patcher that is just 1 or 2 megabytes large.
The actual client should be downloaded through patching.
If the patcher is then hidden behind the login, then only who is actually flagged as "in-game" can patch (thus download the client).
This will make these attempts useless and the staff can move on to more important work on Xsyon...