For a while (maybe even still, I haven’t kept up with it) you could unlock paid features with a modded client, so they absolutely have a history of client-side verification.