This might have become a bit confusing but that is because hacking and preventing hacking is a very complicated subject.  This is how to look at it: