My note is extremely clear and it doesn't allow you to imply that the coordinator can sweep a user's wallet.
Exactly, by not verifying the info the client opens the door to a malicious coordinator to potentially charge a different fee than the 5% (steal).
You could agree with me that removing the Scode was the correct thing to do, right? Could you agree also that checking how much fee a user has to pay is the correct thing to do? Or, do you prefer to let that to the users?