Is MessagingService:PublishAsync() and MessagingService:SubscribeAsync() abusable

I have a quick question. I’m wondering if MessagingService:PublishAsync() and MessagingService:SubscribeAsync() can be used in local scripts. The reason of why I am asking is because I’m wondering if exploiters can abuse these.

As stated here the MessagingService is not replicated and can only be used from a server script.