Program Security

Not really relevant to what he was talking about.
The same could be said of client vs server side gaming as Nexon proves over and over.

He was referring to using the internet as a protection measure ("Why can't they establish a live SSL/VPN link during the authentication"). I pointed out that it can, in certain ways, be a protection (just not the way he was thinking).

Each time they release a new update most companies will change the security slightly to force the public to wait on a new crack or break down and buy it legit.

Most companies I know, including relatively big ones (adobe, etc.) very rarely change security measures. I've seen applications where a simple search and replace worked for years, through several major version changes. It's simply not worth the programmers' time, as most of these companies rely on business customers who cannot legally use cracked versions.