Hmmm. I don't see why any of the crypto stuff in the paper is necessary. A modified client can log, leak or change any message it wants once it has the plaint

Hmmm. I don't see why any of the crypto stuff in the paper is necessary. A modified client can log, leak or change any message it wants once it has the plaintext. You shouldn't need to understand the protocol at all.