RemoteEvents
Published onRemoteEvents will happily receive a giant dictionary from the client, happily deserialize it, and happily reflect it to Lua. This seems like it would be bad, but in practice, the client gets disconnected before it has a chance to send concerning amounts of data.