Yep you could double spend, could also mint tokens that aren't backed

But I can send you a token while you're offline, online is only needed for redemption