I have a local script that fires a remote event which is inside of the local script and is picked up by a server script that is a child of the remote event.
Local Script > Remote Event > Server Script
But I heard that exploiters can see local scripts and not server scripts. But I am not sure if they can't see server scripts that only belong to ServerScriptService or if they can't see Server Scripts at all.
I know this isn't exactly about lua, but I really need to know. Is this something to worry about?

2 comments
I think so, yes?
They can't see anything inside ServerStorage/ServerScriptService, and they cannot see the sources of server scripts no matter where they are