> We even check to make sure that all the cities saved are legit, so that the region play, leaderboards, challenges and achievements rewards and status have integrity.

Wait, didn't someone demonstrate that a modified client can edit the region as well as their own cities? There's obviously no sanity checking going on with the data the clients return, much less server-side simulation.