You can’t prevent the clients from changing their variables locally but you can prevent exposing internal server variables and validate input coming from the client before applying it on the server. You should use PlayerState if you want to keep a variable between levels.