I’ve implemented both.
And if you think that just because something is client side, clients have full access, you couldn’t be more wrong.
Sure, it’s not as safe as having everything verified by a server authority, but it’s also not something anyone gives 2 craps about.
Cheating happens, server-side or non server-side, pretty much no matter what you do.
As such, deal with it in other ways. Policing/Taking reports/Monitoring behavior etc.
Also, Implementing a robust anti-cheat solution with peer to peer checking would be far more beneficial in the long run.