Not sure what you can see on your end in relation to the code but do you reckon that the IP logger and data scraper were put there intentionally for more nefarious purposes or do you reckon this is a amateur coder doing to their best to protect 'their work' (Please ignore the assets that aren't theirs, lol) and inadvertently created a method that would allow for backdoors?
Also, to mirror what Johnny said, it is really odd how protective of the game they are when the majority of assets are not theirs. I guess that Pateron grift must be all they got for income.
Also also, how do they intend to get this on Steam? Ignoring for the moment that some models aren't theirs, aren't some of those characters from other copyrighted IPs? Did they get permission to make a commercial product with those other guys stuff?