So what? It's obvious that someone can reimplement the server logic. This is how we've worked around multiplayer DRM forever. Maxis didn't say "we are incapable of writing this code to run on a local client", they just said "we wrote this code to run on our cloud infrastructure, because it's a buzzword that might get someone stupid to care about us, and because it has a convenient side effect of making piracy more difficult". Of course they could have written the code to run client-side, or to run on independent servers, or whatever.