Wondering about the data.

I guess they just wanted to keep the concept "monster stats" in a single place in the data, the monster attacks are all done client side and then sent to the server (to reduce lag in monsters "noticing" the player I guess) and of course monster graphics are client sided.

I would assume that as well. Lately, I've heard some people saying there's a "new" heal hack out abusing this:

 NB, contains image of a criminal

monster graphics are stored client sided. There's no way an MS server would need those graphics.