If I parented a script, not a local script, under a remote event under a tool, would an exploiter be able to see and read/edit the script? Should I just keep my Server Sided Scripts under the ServerScriptService?
To get the tool in a local script, you do script.Parent. To get the tool in a server script, you’d need to do script.Parent.Parent.Parent.
Overall I don’t see why you can’t put the remote and the server script in the tool itself. You can even organize your remotes and scripts by putting them in folders called Remotes and Scripts.