Your explanation is fine. You would ideally want an authorized peer (typically the host, for server-client network architecture) to be the singular truth on what happened between peers instead of what the client did or saw. A central authority in other words.
If you want a good read check this article series out.
And this is my current MultiplayerSynchronizer that I have been working on inspired by the articles
Also you can do a lot of network code with the MultiplayerSpawner and MultiplayerSynchronizer without using rpc’s
You will need rpc’s, but generally speaking the two multiplayer nodes eliminate a lot of complexity.