As for the security, I personally think we will opt into the best practices for securing our backend services. Please if anyone has any suggestions kindly raise an issue or email me at [email protected].