How wise would it be to have a client script that performs sanity checks on the client side and also a server side script that also performs sanity checks but also monitors the client side file so that if it’s changed or deleted it raises the flag?
it is impossible, you can’t due to server denies the replication of Client unless RemotEvent or Any that is similar to RemoteEvent (usually advanced exploiters may bypass it)
it’s not 100% guarattened security
True, exploiters could manipulate remoteEvents in some ways (eg : preventing your local scripts from calling them and seeing their arguments and etc) with an executer build-in function called hookmetamethod.
It’s important to note the server cannot directly monitor the client script instance because if it is deleted on the client that change will not replicate to the server (i.e. it will still exist on the server).
You should do your best to hide the script, and then implement a secure handshake between the client and the server. While not foolproof, this stops a lot of “script kiddies” (exploiters who have absolutely 0 clue what they are doing) and poorly-written scripts/executors.
Reminder this should go alongside a server-sided anticheat.