1. Client code *can* forge posts and swap zap addresses.

2. Server code can augment the #Nostr experience in ways UI-only clients can't. This is why #Primal is winning.

3. Attestation for live server code is a real issue, but with primitives like runc/containerization, something like this is getting closer to being possible.

4. #Primal could rug their users using a rogue build on the server just like Damus could on the client. The reason these things don't happen is that the risk is destroying the project's reputation and the return is a paltry sum.

This is 101 stuff man.