Or they could just do the job right and make it so that player hit confirmation is handled clientside. Yes, that makes it easier to hack. That is why we are supposed to have GMs.