Because it runs in the browser it's trivial to apply client side cheats. For example see through walls, auto aim.