I mean I guess it wouldn't be too big for them to stub out all calls to the module functions with

function create() { throw new Error("Don't try to use this in a client script");