…
do you know what you are talking about?
why are you talking about client hitboxes and then saying the server gives the client hitbox data??
of course the client returns the people that are hit or the position? that’s what makes it a client hitbox
so an exploiter can hook the returning hit or position in order to extend their hitbox