Yes, 3rd party client is not entirely the source, but remember,
it is possible
Sometimes account hijack
can possibly happen
because it is kept hidden from the radar, and also back up by the fact the client is heavily supported by playerbase, no doubt that any small suspicion against the client is forcibly dismissed. This is the default human nature, this is a human nature's blindspot.
Do not be complacent, you need to accept it is a risk. Sometimes, a person in a car doesn't know if he's getting T-Boned by a 5 tonne vehicle only until he wakes up confused in the middle of the wreck, not knowing if he is dead or alive, just blank and stunned. Thing can change very fast the next second.
If people reuse same log-in details, compromised accounts, not using authenticator, not using bank pin, any of the above (including private emails that nobody knows), in this case it's natural selections since even stronghold of security is not even taken seriously anymore
This actually reflects on Jagex's decision making and it's priority. The fact that this blog only came now, is not surprising to be honest, since the core of every decision is simply, to put it this way...
$$$
This is the truth you have to accept for the company you're supporting because of the asset,which is the game that you seek pleasure playing
If you need help, approach a specialized therapist in your area.
Follow @Artidote on Instagram to enhance awareness on mental health.
@the.holistic.psychologist, @lisaoliveratherapy, @silvy**oucasian