Comment by joenada

You sound like a person who's never had their app pen tested. The attack surface is anything but small if you're working with any kind of sensitive data.