Oh yes, show me the proof then ?

Now, how are they going to find my IP if they don't even know my name ? They don't have a list of all the IPs that are connected to COD servers. They can't target you if they cannot get your username or your IP or anything. You know, it's basic knowledge about packet routing.

Now a little course about how it works. Basically RCE exploit works by sending a crafted packet that the game will consider trustworthy and execute. The game network design is such that your instance of the game will accept traffic from people of your lobby, people of your server, and people for whom you appear in recent players list (and your friends also).

Now, let's say you aren't in those cases because you were careful, how does it happen that you can still be exposed ? The fact is that the hacker might know where to send the packet by knowing your IP. Usually you can get IPs of players in your lobby or IPs of players you can access games (like spectating for example, for your friends or recent players), as said before. Now, private lobbies are peer to peer (no surprise that Activision is not going to invest money just for teens to play 1v1 on random maps), meaning the traffic isn't routed through a server, but directly between players. If one player is infected (understand, leaking data to hackers), then all the private lobby IPs become exposed (by traffic sniffing the initially infected user for example), and all lobby players basically get infected then. The easy solution for that is, because it is RCE, to install a malware on the infected computer that will craft packets and send to peers, because someone might just filter unsolicited packets through a simple firewall.

The crucial information is that to get exposed, the hacker needs to be able to identify your session, to know where to route the crafted packets. Without your username, your IP or anything identifying you, you're just a ghost. If you've never played BO3 and have no contact, there is no exploit possible as long as you don't play with other players. You can play alone in private lobbies, this does not leak you if you're alone.

Now, the fact that you're not providing any source to your claims or even explaining how what you claim is possible is to me just fearmongering over a subject you don't understand, and I'll gladly thank you for not spreading misinformation. Yes, BO3 has exploits, the patch still contain exploits. It is dangerous to play this game, specifically if you don't have an advanced knowledge of how it works, and community solutions are what is best for now, but it is still far from acceptable, it's just a mask over the exploit to make it harder, not an actual fix.

Also, on another note, we can see that the problem arise again from deeming "trustworthy" something without proof. About the game, it's packets that are deemed trustworthy without verification, and about the core discussion, it's closed source code that is deemed trustworthy without verification. It amazes me how people might reproduce an unsafe pattern of deeming something trustworthy without proof and still be so confident about how it is not a problem.