I'm going to back up madrooster here.. plenty of documented instances of QFF and hotel points being stolen, usually via the reward stores in each scheme.
Flybuys blocking foreign access is a good defence layer, it does not singlehandedly solve fraud issues, but seriously, who is going to amass...