So I want to know if keeping all my scripts local for a singleplayer game a bad idea. I’ve been hearing from my friends that exploiters can steal the whole game if I were to continue using all locals, I just want to clear things out if this is true?
exploiters can’t view server scripts’ contents because their bytecode is not sent to the client, the source in local scripts is compiled and sent to the client, it can be decompiled into readable code.
If you are making a single player game, then you can store all the scripts on the server and only use local scripts for input detection and so forth. As @XxELECTROFUSIONxX mentioned, exploiters can view local scripts, thus could get an idea of how your game works to exploit it better, whereas if most of the scripts are on the server then they cannot read them and so it makes it harder to exploit.
By exploit you mean play around with the variables? but can they like steal my whole game?
Exploits can steal anything accessible by the client. So to answer your question, yes. Even if the game is single player, you should script it like a normal game using proper Client-Server management and Remotes.