Hey, I'm Dawid, the solo dev behind Baseplate we're scheduled to launch here tomorrow (an agent that playtests your Roblox game in Studio and audits RemoteEvents for exploits).
While building the exploit-audit side of it, I read way too many stories about RemoteEvents nobody validated: free currency, teleporting into staff-only areas, duping items, the usual chaos.