Should I humiliate hackers...publicly?

From that point of view, yeah, it’s a waste of time, doing nothing more than giving in to what they want. Of course, I’m going to try to prevent exploits in the first place, but if they DO find a work-a-round, why not let some other people have a fun time?