Question How much is client side now?

[Tooya]

Perhaps I was out of the loop before, but I am just curious, how much of Gunbound is client side now?

The avatar stats seem to be client side (or more reliant on the avatar.xfs file)
The 1hko, which I know existed before, is what I believe to be client side (although I am not sure how...)

And theres a few other things I read. Is Gunbound as a whole just.. less secure now? o.0

And if anyone wouldnt mind telling me, how exactly does the 1hitko work (I mean the process of making it, not using it.)

Thank you