Alot of WoW's code trusts the client, including things like positioning and checking whether you're allowed to cast spell X or not when you mash the button each time.