Hey Scott!
Here are some resources on security best practices:
1/ Ensure Web Application Security with 4-Step No-Code Best Practices
2/ Securely using API Keys from a Frontend No-code App
Hope this helps 
1 Like