Yes, as you can see there's no security, once the server receives the block dig packet, it will simply destroy the block (even if it's bedrock/adminium).
The security is relatively easy to implement.
According to this digging has a couple of stages.
Once the packet has been received for "start digging", store the XYZ coordinates and the current time.
Once the packet for "finished digging" is received, check coordinates and make sure enough time has elapsed before breaking the block.
???
profit
The security is relatively easy to implement.
According to this digging has a couple of stages.
Once the packet has been received for "start digging", store the XYZ coordinates and the current time.
Once the packet for "finished digging" is received, check coordinates and make sure enough time has elapsed before breaking the block.
???
profit