If you place a script under a basic part in the workspace, and then call a module script in the server script service and use the function, will an exploiter be able to read the source code within the module script?
Since the module is in ServerScriptService it can NOT be viewed by the client / the player, the exploiter in your case.