Anti-exploit for Geyser cross-play servers: per-packet limits with a Bedrock margin, server settings audit, never kicks Bedrock players.