So I was inviting my friend to my whitelisted server, and I had forgotten to whitelist them. However, they were still able to get in. I'm not complaining about this specifically, but about how this could be exploited.
I'm on a modded Fabric server, so maybe that could be related? I don't know, please help.
It works now!