Is UE4 Dedicated Server Networking Authoritative By Default?

PlayerState is replicated to clients and thus they have authority over it and the code executes. You might want to reconsider to move the logic to somewhere else like GameMode (which only exists in Authoritative Host).