Pageload - difference between URL parameters and Custom States

Hi, i have recently discovered that you can make a page load quicker by only using one single page app by using URL parameters and custom states. Can someone please explain what the advantages and disadvantages are. I have read online that users can manipulate URL parameters, which puts the safety at risk.