add block unity method like Instantiate(prefab);

[skulidropek]

Not all Unity methods are server methods. If it is a client Unity method, it should be blocked.