Actually, the customization lets them replace the database with their own so they can pretty much customize anything. Some of the constraints are the internal game mechanics. I will need to know what weapons are where, to determine the characteristics, like firing arc etc.
It makes sense to specify the hotpoint locations via an editor for each model. But as what is located at the hotpoint can change during gameplay, that needs to be stored in the game. Therefore I need to know the limits.
The game is broken into states, the tactical or game combat, anything that can possibly change must be stored in the game.
I am not trying to limit customization but I don want to deal with a lot of "bad" customization. So the idea is to store information in databases, mostly unencrypted and they can change that all the want. The encrypted they cannot changes, but they can created their own, we publish the data. In the end, the game is nearly 90% customizable. And the encrypted database will be open for read only so modders can copy and read the data, just not change it.