One security issue is that bots are being able to exploit newbies that does not have enabled the option to "hide" their selected cards, enabling the cheater to know exactly your cards and build a perfect team to beat it.

I don't know why hidden cards isn't the default.