Comment by moneywoes

How would those api keys be exposed if it’s an app?