I AGREE with that but for multiplayer only!! not single player
Why you don't differentiate exes ?
Single Player exe: all cvars unlocked INSIDE THE GAME (no need to put them on autoexec), no paks integrity checks
Multiplayer exe: limited cvars, only the ones that doesn't create an unfair advantage, and integrity check on pak files.
and everyone happy, sounds bad ?
or as alternative if you are able to lock (and restore to default) cvars when join a multiplayer match using hte same exe would be nice aswell, but please let us play with the sandbox in single player, this has always been one of the most interesting part of the cry engine.
Also reading the open letter of Cevat Yerli on http://crymod.com/ it looks your intention is to release sdk for free for non commercial use, so an exe with all cvars unlocked will be fundamental sooner or later.