Can exploiters change local variable bool values in local scripts?

I'm making a debounce script for a gun and im not sure how to go about it its FE

but I was wondering if I can just do

local CanFire = true

I know inserting a intvalue into Tool is easily exploitable

So I was wondering which was the best way for a FE Remote Event gun

I was also thinking about inserting All the Bullet Values into serverstorage but that seemed like it was going to lag

This is a too broad subject and there are no easy answers.

Not having server checks at all is a BIG NO, if your game is to become even slightly popular. AutoClickers are found everywhere.

Having server check every shot is also a bad idea. The game would become too laggy.

You should definitely make some kind of server check, but limited to bullet spam detection IMHO. Please do some more research, your solution is bad.