On a related note, isn't this one place where so-called Trusted execution and Web integrity would legitimately be of use? With a completely trusted path of execution coupled with browser integrity, a cheater would theoretically be forced to use an entirely separate device or source for moves, like a second screen, handheld, beads, whatever... which would need to be input moves in realtime and thus making it quite a b…
Like ... an iPhone with a camera that views the monitor, recognized the board and suggests the best move?