As a clarification, of course you will validate all moves on the server side and make sure client side state is consistent, but what I meant by validation is when you have to give every feedback from the server back to the client you will quickly find yourself in a ddos situation with so many players online.