As has been laid bare with the recent issues in the VR Poker world by Nex and now the recently released Fish! by Godfall, hackers are able to manipulate persistent user data. Either resetting it maliciously or giving themselves advantages. This has also been a problem in B Clubs for some time with hackers giving themselves instance permissions.

It is impossible to prevent this because all world data is run on player machines. No matter how encrypted or however many anti-cheating checks a world creator can come up with, they are easily defeated when someone becomes the world host. There has been a lot of discussion lately on allowing world creators to ban specific users. But that doesn't solve the problem.

There should be an option for world creators to use a true server/client architecture so that these kinds of hacks become impossible.