The server has the real power

The model never reads the clock.

It produces a request shaped like get_current_time. The host and client carry that request. The server's ordinary JavaScript reads the clock and returns the result.

The same boundary holds for files, calendars, databases, and messages.

The model asks. The server touches the world.