How can I keep the content in workspace safe from exploiters trying to copy the models?
There really is no way to combat this, even with FilteringEnabled. Exploiters use a level 7 script environment, and there is 0 way to combat it.
But an interesting question is that how can hackers copy your game if nobody knows about that game, and even you?