[codingthewheel]

There's no security on the client side often even when you connect that client to a server.

Think of a world in which, instead of shipping binary executable code to users, we shipped them full source code. They'd be able to go in and selectively edit out the "licensing" stuff, remove the lines where the app dials home, etc.

This is actually the world we live in, but we call this source code "executable code". Now we pretend that executable code is "obfuscated" or "cryptic" or "difficult to understand" but that's just so we can keep our sanity. Executable code is transparently open, well documented, and perfectly editable on any major OS, including Win and *nix, regardless of what sort of checksums or digital signing you do to ensure local files haven't been changed, all the security experts in the world can't put Humpty Dumpty back together on the client side, or keep him from shattering to a million pieces in the first place.