genuine question. built a couple things with lovable/claude code/cursor and only later realized i had no idea if i'd left keys in the code or if anyone could just hit my api routes and pull other users' data curious what people here actually do before going live: - do you check anything at all or just ship and hope lol - if you paid someone to build it for you, did you ask them about it - anyone ever got burned? like leaked keys, surprise bills, data exposed not selling anything, we're doing a hackathon this weekend and trying to figure out if this is a real problem or just us being paranoid   submitted by   /u/FuturisticSp [link]   [comments]