A common cheat in FPS games watches the rendered frame and sends mouse input to aim+fire. The server being authoritative doesn’t help in this situation.
These sort of cheats are often entirely out of band, running on a mirror of the video stream on a second machine, and transmitting user input back via USB. Clientside snooping won’t catch it either.