I am beginning to wonder that Brokers can actually see Custom Indiors codes and our EA.

This one is quite tricky to prove/disprove because sniffing at the internet packets with no knowing how data is passed between client to server is like barking at the wrong tree - hence purely argumentative.

Have you got the exact same notion?