Linux Systems Engineer here, you pretty much nailed it. The servers are really bad during events, but it's like this ALL THE TIME on official servers. It's been going on for years, and personally I would be embarrassed to say I worked on the team responsible for their server cluster.
They run multiple maps off ONE virtual machine (obviously not with the resources it needs), and on WINDOWS ffs.
Some of the instances run THREE to FOUR maps at once.
They are also open to OS fingerprint scans with a simple nmap lol.
Pretty bad indeed.
