[tigerox]

They are not the only fixes.

If you run a dedicated server you can run the server as another user. Giving this user only write access to logs..etc.

Much easier then running a mod. File download is still a problem, but you can protect your rcon password by launching srcds with the +rcon_password and not putting it in your server.cfg.