Well, a known problem with pre v4 NFS is that it uses and trusts client side UIDs I believe, In fact I believe even v4 does this by default. So if I understand

Well, a known problem with pre v4 NFS is that it uses and trusts client side UIDs I believe, In fact I believe even v4 does this by default. So if I understand correctly, it treats root on the client like root on the server, and since NFS gives direct access to the block device this is even worse than it initially sounds.