the problem isnt the tech, its what you build on top of it. running a live server on a closed binary you didnt compile is risky by default. you cant audit it, you cant patch it, and when something breaks you dont have the source to know why.
the usual “but everyone uses the ncsoft client” is exactly the point. that binary isnt safe because its third party, its safe DESPITE being third party, for one reason only: 20 years of thousands of ppl tearing it apart byte by byte. whole protocol is documented, no surprises left. if it had anything weird in it we would have found it a decade ago.
this client is the opposite. its a fresh binary that a couple ppl looked at for a few days. and who made it matters. ncsoft is a dead corp that couldnt care less about your private server. this one is from a project thats alive, from someone who most likely doesnt want his client running someone elses server. im not saying it has anything in it. im saying you cant audit it and the author is not a neutral party. add that this same thread shows it gets reversed in days, so it gives you zero protection and full dependency.
for a weekend project who cares. for something with real players i wouldnt build my server on that.