Able Ability System Info and Support Thread

To think of it… What stops a hacker to get all ability objects from code, and owning a character ability component trigger ANY ability that doesn’t have cost? is that why every ability has to have cost? Or I might have to register tags allowing triggering of specific abilities. Every ability has tag container. But if you dont trust your players should I follow this path of logic? or there is something different guarding the natural law order of clients triggering abiities?