✓ Accepted answer
Just have filtering enabled on and you'll be just fine. They cannot edit there character globally (Unless you use free models with backdoors). as well as ROBLOX has started doing report tickets now which is very surprising because they have not did that since 2015. And ROBLOX's new anti-exploit if it detects anything getting injected that is a server exploit (synapse,asshurt,Protosmasher,ETC) It will ban the players ROBLOX account and let admins check the recent injections on your client to get unbanned. You'll actually stay banned if they detect exploits. But if your scared this should make it harder to exploit
local tool = script.Parent
local player = game.Players.LocalPlayer
local enabled = true
local protection = true
tool.Activated:Connect(function()
if enabled then
if protection then
enabled = false
wait(1)
enabled = true
end
end
end)