Comment by InGodsName

We use Serverless lambda + api gateway + cognito, there is no room for getting hacked.