There is a server property named "server-authoritative-block-breaking" which if true, the server will compute block mining operations in sync with the client so it can verify that the client should be able to break blocks when it thinks it can.
It would be nice if there were support for setting this via an environment variable, just like all the other properties. No rush, just noticed this existed today 😄