We take this activity very seriously...
Don't take this personally Will because I'm not trying to ride you about it. You don't set policy. I have to ask though, what part of players getting at least three strikes and even then only getting shadowbanned (and let's not be coy here - that's been shown to be the action taken against people for at least three years that I can recall, referenced by e-mails that have been shared publicly and so on) qualifies as 'taking this activity very seriously'?
Very few people that I know would consider that to be 'taking it seriously'. Sorry but that's the truth.
It's not about how much effort is made to find them - I know most developers don't want people hacking their games. It's about what happens to them when they are found.