fyi @nta:
We are using sv_filterRequestControl for ~1 month now (to prevent cheaters from taking ownership about foreign entities like another player’s vehicle). It works as it should and nobody is able to get the ownership of an already owned entity.
At first we used option 3 (FilterPlayerPlusNonPlayerSettled) but as it turns out, option 1 (FilterPlayerSettled) does the job better (because it does not block deletion of entities older than g_requestControlSettleDelay, like police barriers).
I really like the feature and it is a very good security measure, thank you!