The .pak files NEED TO HAVE SOME KIND OF PROTECTION!
I'm talking checking their integrity when connecting to a server...
It shouldn't be that anyone can simply edit their values save them and import them back into the game and you are bloody golden!
Crytek why oh why did you leave the most valuable things client side - smells like teen spir... errm... console i mean.
I'm sure it wouldn't be hard to make sure the .pak files are legit every time you launch the game right?