Sorry for so many questions.
What is handled by the qvm, binary, and the base pk3?
What does the client do? Are all calculation handled server side?
Are speedhacks, going through walls, etc. possible in tremulous through packet manipulation(not exploits server code)?