A user with non-Admin access can change a configuration file on the client to modify the Server URL.

A man in the middle can redirect traffic to a malicious server in a compromised configuration.

A user with a compromised configuration can start an unsigned binary as a service.