[Loriel]

I doubt anybody is truely hacking on Graal.
Hacking has very few to do with trainer use, or even trainer creation, hacking is not what you get when you enter that word into Google.

I do not think that C++ is seriously stopping trainers, as movement (speed hacking, wall hacking) is still done client side, and showimgs (all those recent annoyances) must remain possible too.
Also, many security holes have nothing to do with Graal, but only with the silly, insecure scripting. When scripting larger things, scripters should always see all input from the client as very suspicious.
When helping out on various PWs, for example, I often see people working around the serversideness of setlevel by having an action in the Control NPC that warps players to destinations they choose. That is just an invitation for hackers to have free warpto.