They do. But they need you to help. (insert that picture of that bear that want's you to help prevent wildfires).
If you come across suspicious projects, hit that report button on the bottom. And tell them why it is suspicous, like provide a link to the original in case of a stolen game.
What they desparetly need to improve is their hacked account detection. 2fa will not protect against cookie theft. And there do be technical stuff to detect hacked accounts, even if the tokens are valid.