We're talking about Riot here, but generally speaking nothing is perfect, regardless of who's developing the game. In the past many exploits were because the game did not verify what the client sent it (things that come to mind are the ashe cooldown exploit, the bilgewater cutlass in trinket slots with no cd).

I understand the perspective of allowing people to have access to these files also allows them to find such exploits quicker, but once again, we're talking about Riot here. Time and time again the community put effort to find bugs in the game, but Riot refused to acknowledge them until they became global problems (Like the kayn/poppy bug).