I've heard that exploiters can bypass an attempt to kick them if the kick comes from a local script. To substitute this, could I just destroy their player instance (from a local script), or would I still have to kick them from the server to make sure it's non bypassable?
Use a server script to check every couple seconds if its in the cleint and if its not then kick them or clone it back in (: