1) Don't have FTP because i use SFTP (FTP over SSH), SSH is encrypted by RSA key so no chance anyone is getting there (and also there is different key, user and password for each server so again no chance anyone would bruteforce or whatever 2 in the same moment), there is no local access to the computer since it doesn't have even keyboard or monitor connected. It's server.
2) I did. Let's wait what happens now. (but again - it won't be rcon because every server has different rcon and there is simply no chance anyone bruteforced 2 rcons in the same moment)