Plutonium

I setup a server password but my friend can still join without the password. What's up?

There's a dangerous RCE exploit on the Steam version of the game. Does the Plutonium client fix it?

Resxt The game just attempts to download the server's version. The server uses a version called "sanatorium" while the downloaded version from the link is just called "Clinic of Evil" and I don't think renaming will help.

Either way, why would the server's version not work?

Upon joining a server with Clinic of Evil; I get to the loading screen and the bar fills fully, then is frozen forever. I have the map downloaded, and installed T4M. I have a torrented copy of the game but everything else works fine.