Can exploiters change values inside module scripts that can then be replicated to the server?

[Jiraiyeh (Chopper)]

I have had about 2 exploiting incidents in my game where these exploiters were able to change their stats despite all my remotes all being “secure”.
Im wondering, if a exploiter could and do, change a value inside a modulescript, would that replicate to the server when its being required?

Say I have this value

module.Max = 10

Exploiter changes it to

module.Max = 100000

and I have a serverscript:

if player.Stat.Value <= module.Max then
print(module.Max)
end

Would this print the value the exploiter changed it to? and if it does, how do I better secure my game to prevent incidents like this occurring?

[PapeKDev]

@Jiraiyeh

m wondering, if a exploiter could and do, change a value inside a modulescript, would that replicate to the server when its being required?

The module script can be called on client and on server but the client modifications only affects the client.
Anything that server delay is not impacting gameplay can be handled on server like buying upgrades etc.