The User Interface sends nothing more than user inputs as “action requests” to the server.
The server then accepts or denies them.
The server calculates everything itself and outputs the results to the UI only for display (loot, decay, ammo consumption, hit damage dealt and taken, mob movement...