Module script question

So, essentially, I have a module script located in replicatedstorage. It has functions related to setting data and retrieving data using get and set async. It also holds information about the current session data. My question is that are exploiters able to use these functions and mess with data since it is located in replicatedstorage?

Each client has a different “copy” of a module script, and the server has one too. When the server (or a client) requires the module, the result is cached and will always return the same value to the server (or that client). That means that if the exploiter modifies it, the changes will only affect their client’s copy and not other clients/the server.

Edit: It’s explained more clearly here:

1 Like