can the player change player instance's attributes?

[woeful perch]

on the server script i have this code

function Server.OnPlayerAdded (Player : Player)
Player:SetAttribute("WorldName", SessionID)

SessionID is the id of the lobby the player is in. Since the local client script is able to get the attribute as well, i am afraid that the player is able to change the player attribute causing them to be in another player's lobby. Before anyone suggests having a variable and storing every player's session id, then from the client, use a remote event to get that id, yes i know that, however i would like to reduce the memory so im using this method

[limber gust]

whatever they change isn't replicated to the server