Lightning’s security model is simple: Try to cheat, lose the channel. If Alice or Bob publishes an outdated state, the other party has a window to catch it and claim the funds as a penalty. That asymmetry is not a bug. It is the protection.