Actually event protection is generally used for events that add items, give money, etc.

For example:
A non-protected script would be something like:

RegisterNetEvent('myscript:server:event1',function(itemType, amount)
  local src = source
  exports.ox_inventory:AddItem(src, itenType, amount)
end)

Basically, you try to protect what can be potentially dangerous for a server.

Calculations that have to do only with a client or with the client’s action are done on the client and that’s it (at least that’s what I do).

If you consider that it could be potentially dangerous for your server for a client to modify that data, then protect it. Otherwise, it is not necessary

As I suppose it is a drift script…
Is your server only drifting?
Is it just a mini-game with rewards that doesn’t have much impact?

Ask yourself these questions