the drawback with server-sided hitbox will always be that the hitbox is gonna lag behind the client’s current position. in the other hand, client hitboxes will need many sanity checks to combat exploits which can become complicated.
I think the ideal solution is something akin to this resource:
i believe it utilizes some math based on the humanoid’s velocity & ping, to estimate the current client character’s position.