Umm, flaw is probably the best way I can think of to put this one.
http://www.extremetech.com/computing/14 ... s-and-more
http://webcache.googleusercontent.com/s ... dows8Games (google cache cause the site went down due to lots of traffic)
Not that this is much surprise, most apps are pretty trivial to break the DRM on, but the ease of this one for many apps is surprising. Even if the xml files are encrypted the decryption keys are on the machine anyway so it should still be fairly trivial anyway. Combine that with microsoft giving pirates a free win8 license and this whole thing is turning into quite a joke.