at least with running nothing but the renderer and the controller input client-side
Nearly all competitive multiplayer games run this way. The client is an untrusted rendering service, while the overall state of the game world is tracked server side.