Security in the game industry is a sick joke. There are dozens of RCE riddled titles sold on Steam at this moment. For example, many past titles on "Call of Duty" series with CVE-2018-20817 [1].
BTW, I highly encourage all EU citizens to prepare Cyber Resilience Act complaints for September 11, 2026 when the law kicks in ;-)
[1] https://www.reddit.com/r/blackops2/comments/1v3xowq/just_ent...
Absolutely crazy that these CVE-ridden CoDs are being sold by Microsoft itself!