"There are a couple main avenues for attackers here: - You can move someone's persona data off of their account, stealing their username & game data - You can log into someone's account by moving your Xbox persona to them, logging into an EA game with an Xbox, and then logging into their account through the Xbox account, as your network is now trusted - You can ban someone's personas, which will prevent them from playing most online games - You can change someone's username, and then take it for yourself - You can bypass game bans by moving your persona to a new account, because they're handled by disabling the account-wide game entitlement"