Quick run down of what happened:
I have been using models from toolboxes as placeholders in my project, even using some with script (pretty dumb, I know) but after I was done, I made sure to clean everything up, or so I thought.
Testing the game inside studio was fine, however, when I joined the game in a real instance of roblox, I was given gear.
So, I start freaking out, thinking my game has a virus some where so I start looking for it. I searched the entire explorer and using find all in hopes of finding scripts that use “require” or “getfenv” to no avail. In the end, I rip everything out of the game except the baseplate, but alas, still receive the gear in game
I had given up, and decided to ask for help on a discord server. After they joined the game, one of them realized, they were only given gear they owned. And this lined up. The gear I was given, was gear I own on Roblox
After, knowing this, the person ask me to disable gears
And like magic, the gears were gone and my game was “virus” free
TL;DR
Is this a real Roblox feature where a game just gives all the gear you own or did only allowing certain gears only stop whatever script/virus from giving out the gear but not stopping it from doing other malicious things?
edit:
It was a feature, 
(valid 3hr crash out?)
.