Any serious (read: MMO) application of this would be continuously reporting position regardless, so it wouldn't that big of a step to validate them server-side and prevent such hijinks.