Well yeah, that's really the only way mods can add meaningful security to a game where everything happens client-side.