Yeah Nintendo did a pretty decent job this time around to prevent hackers and what-not. Still no AR for the 3DS, but there's other exploits that can still be used.
I mean, we found out about the 3 secret legendaries in X & Y within 3-4 weeks of release. Relate that to the GBA games, we discovered every pokemon in the game within the first 2 days of release. (For Hoenn and even Sinnoh)
Not to mention the decent anti-hack system. You can't just use any pokemon in online battles now. Every stat and ID of a pokemon is checked to for it's legitimacy. You can still dupe and use hacked pokemon, but they have to be legitimate stats.