It’s just very easy for experienced programmers to manipulate the memory of their clients once it runs on their machine, it’s orders of magnitude harder to hack the literal servers of Blizzard.
People are confused because they don’t know those things.