I think the lack of documentation is probably a result of:
(b) are known by insiders who don’t want to talk about them
The insight you’re looking for is probably just buried in the bugreport logs, and generally nobody publishes those. My experience suggests that hackerish types will try even harder to break a game than they would a normal business website, often because finding and reporting bugs is commonly *encouraged* by game masters, who reward found exploits with special in-game items that provide a strong motivation for people to hack ethically, while banishing those who exploit without reporting.

If you’re interested in seeing the stuff that got caught in SSW’s code (heh, nobody’s perfect), the bug reports (all 2254 of them) are searchable as long as you’re logged in.