Board Game Arena

Several friends of us have been playing arena mode for a while, I have almost 500 games, and we are certain that it is very possible for people to see the cards in the deck and the opponent's. Is the game protected against SQL injections? I find it quite accessible. It's not funny, you see very stra...