IIRC the EVE people do what every game developer does, and stupidly assumes that the client follows the rules.
No they don't; everything the client does is validated server-side. The purpose of this is automation of client-side tasks, not doing tasks which would be impossible by game rules.
Yes, I pointed out that decompilation is one of the steps that needs to happen to make this into something useful. However, without a simple, hard to detect mechanism of getting your code into the process (which this sort of injection is), its usefulness is limited. By injecting into the client rather than putting code into their archives, you make it considerably simpler and harder to detect.
IIRC the EVE people do what every game developer does, and stupidly assumes that the client follows the rules.
Furthermore, all of this is against the TOS, so if you agree to that, you can't do any of this. If you don't agree to the TOS, it's fine.