How can you stop someone from making a protected HeadQuarters with a smurf account and allowing others who are not assigned to the HQ from using and storing thier loot in the Smurfs HQ?
How to Prevent Smurf Accounts
Good point, this is a concern.. if someone really wants to cheat headquarters and they have multiple accounts and go through all this trouble then it's almost impossible to stop them with game mechanics. Admins would have to set up their own rules against this and ban whoever is breaking them. However, we can try to make it difficult for cheaters.
One way we can do this is by having locks inside headquarters only capable of opening for a member of that headquarter. Everyone else even if they have the key or code, will not be able to open it. This should at least prevent acces into the base unless a member opens the base for them.
Merged post
The other thing I can think of is changing it so that no headquarter is truly 100% immune. Instead we can make it so headquarters grant damage mitigation like how armor works on players. Then, we can make it so the more storage boxes and lockers are placed inside a headquarter, the lower its damage mitigation. So have a configurable amount of damage mitigation cost for each storage item, like a wooden box may reduce headquarter damage mitigation by 3% for example. As players add more storage capability to a base, it's protection is decreased.