The extended version of the damage component overrides some functions to demonstrate inventory integration, the rest is identical.
Do not call server functions on clients.
Actually, it should not be possible to call private and protected functions from other blueprints, but the engine is inconsistent and it is partially possible. Do not call private or protected functions from other blueprints.
All public functions are safe to call from clients.