For a lot of types of games (e.g. social, creative, silly fun) it doesn't matter. For those where it does you have to run servers that you control and write server-authoritative code.
You have to assume clients are hacked whenever you're writing competitive games anyway, so there's not much difference there.
You have to assume clients are hacked whenever you're writing competitive games anyway, so there's not much difference there.