Don't worry, the data is public by design. The real secret is away in the serverless functions environment. Custom encryption keys option in api is on the horizon!