Whilst this is possible, it’s pretty infeasible and we’re assuming the user already has a compromised computer. There’s not much point in securing against an already compromised party since it’s already game over at that point. Roblox I’m sure is using properly configured TLS for all of this so there is little chance of MITM interception.
12 Likes