Correct, but there are private servers that have more than enough legit players 24/7.
You normally just sign up on their website and wait (a few hours) for your "BattleID" to get registered.
(And if you're playing on a public server and suspect a player of hacking then just disconnect and reconnect after a cigarette/snack break )
Also playing: Battlefield 3 (PS3), GTA VIce City, Counter Strike: Source (back to the roots )