Am I right in thinking that editor restrictions right now are mostly client side? I've looked through the code and most of the restrictions seem client-sided, but there's obviously things I could be missing. If this is the case, is there any plans to verify these restrictions on the server side?