so Im making a exploit prevention system on the LOCAL SCRIPT and I know doing that is bad but what I am going to do is
If the local script gets deleted the server kicks the player out of the game
but I heard of stories of exploiters being able to tamper with local scripts is this true?
Short answer: Yes.
Long Answer:
Yes, they can. they can simply just remove the script that kicks you, and then remove the script with the exploit protection. Furthermore, they can disconnect signals (via Synapse or something else that can do it, Synapse is the most popular), so DescendantRemoving/ChildRemoved can easily be dispelled. Ouch. There's not many ways to go against this other than checking as much as you can on the server, and including all your checks in the main script--so exploiters can't disable the main script otherwise the game itself wouldn't function.
I hope this cleared up some confusion.