Your example is about the client misreporting server state to the end user. The big deal is instead about a badly behaved client being able to make "illegal" c

Your example is about the client misreporting server state to the end user. The big deal is instead about a badly behaved client being able to make "illegal" changes to the server state.