Thanks for the question! We’re hard at work on server authority and aim to have an opt-in system for server authoritative avatars to help address many client-side movement exploits (e.g. speed hacks). We’re also exploring a new script type, designed to unify client and server scripts, which can be run in either location and support features like prediction/reconciliation. This script type will make building experiences simpler, leading to more secure gameplay. We expect to have more details to share with you by this summer!