you first point isnt even the scripts fault
its the executors fault for either having a lua implementation of hookmetamethod or having a horrible cpp implementation of hookmetamethod so unless the dude is using a xeno or ballistic paste (which probably wouldnt support hookmetamethod anyway) they wont face that issue
your other points are valid though as many incompetent execs are vulnerable to that