Yes simulation is done in client side, that's why it's easier to cheat.Wait they remade the netcode for DE into a server-based system but as part of that did not move to having the simulation on the server?
I was told that it's kinda hard to move it to server side, it would require writing a new engine.