Answer 1

It is not secure while in the browser since the client can edit the code themselves. It is secure if you handle thing on the server side with something like NodeJS.