You do have a point…
Since my current system is using remote events, and module scripts are more efficient since exploiters can’t require them unless the game has a backdoor in it.
But It could be client side with some issues.
The exploiter can delete it (since it’s client side)
They can access the script (as you said)
Exploiters can require module scripts if they are in a service that replicates to the client.
Why would anyone want this? It’s asking for exploiters to insta-leave because they have a notification telling them a HR has joined a game
Well, if they see a player joins the game and they are an HR, it has the same effect.
Well, why would you want an exploiter in you’re game in the first place?
Are you sure about that?
If Exploiters can require the module Roblox will patch that already.
Why should it matter if they can do either of those things? It’s just a notification meant to let you know that someone of a certain rank joined. It’s not game critical at all. It’s more of an aesthetic thing so it shouldn’t matter if it gets removed or accessed.
why is the poll locked to programmers only, I would like to vote, but cant due to it. Besides that, really cool resource.
I am sure about that, module scripts can be required from the server and client.
Invite expired, can you send a new one?
Could I maybe be mentioned by name? After all, I was the one who made this with you and it’s gotten pretty big- I’d love to have credit here 
I’ll edit it for you real quick, im sorry.
I mean, a good solution is keeping it closed-source, but you wanted it to be open, and that’s fine but it does have risks like this included.
A cool simple thing, good job!
Thank you, I have been looking for something like this for a while.
(sorry for bumping it but I have to vouch because this is a good resource)