Can i use App Token with no scope on client side

API
3

So, with last API change, we cant do any request issue from web app ?
I only need “public” data, i must proxy all my query with a backend ?