For sure, and it’s going to be a necessary tradeoff in many clients, particularly mobile ones. I do think they should still validate SOME events (like profile updates) though.

I do think it’s important to point out that lots of our security/trustlessness is actually smoke and mirrors (for now).