[asherkin]

Of course it's been tried. This filtering is done clientside.
However there are a few limited loopholes, such as the one voogru uses in his patch.
C_BaseAttributableItem::ValidateEntityAttache dToPlayer(void) is the function in question, there is another one somewhere else as well, in C_BaseEntity I think.