When you are using the voicepack on your server, you add it as ServerPackage, therefore all clients connecting to the server download it and therefore have the raw package in their UT install. Only thing missing is a specific .int file for the voicepack, someone with a little knowledge might create this on his own and voila - thats how they can use your supposed private stuff