Limited UGC items can still be purchased via client-side MarketplaceService despite patch

[Zenith322 (noob)]

Despite Roblox’s announcement that PromptPurchase has been disabled on the client for UGC items (as referenced in PromptPurchase callable on client?), there remains a vulnerability allowing users to purchase limited UGC items through client-side scripts.
I recently uploaded a limited UGC asset that was immediately purchased by multiple users exploiting this vulnerability. The issue appears similar to the one described in this post: Prompt UGC Limited Purchase through client? [URGENT]
Steps to reproduce:

Upload a limited UGC item to the catalog
Users can still execute client-side scripts using MarketplaceService to bypass intended purchase limitations
This allows exploiters to potentially purchase all copies of limited items before legitimate users have a chance

This vulnerability undermines the integrity of limited UGC releases and affects creator revenue potential.

Expected behavior

I expect that all UGC purchase functionality should be properly server-side only, with no client-side purchase capabilities for limited UGC items.

A private message is associated with this bug report

[Zenith322 (noob)]

Here in the documentation it states how Experience By Place ID enabled assets should not allow Clients to call PromptPurchase on them. However, I can call this code on the client in my experience and it will prompt the purchase:

	local market = game:GetService("MarketplaceService")
	market:PromptPurchase(player, 94726552555371)

Here is the configuration of the asset for reference: