Thanks for the link. This is my fault because the sentence is ambiguous. Where it tries to explain that "you need to remember to perform auth checks both", it rather means that you need to protect controller routes and LiveView routes the same way, but for a single LiveView, you don't need to do both. I will try to clarify it!
If you have other footguns in mind, feel to shot me an email at jose dot valim on gmail!
If you have other footguns in mind, feel to shot me an email at jose dot valim on gmail!