Or the server could hide the data from the client that the client shouldn't be able to act on until just before that data would be seen by the client. (obviously with a slight tolerance for sending a bit extra that clients might need if lag rubber-banding predicts it might be revealed)