Worried about Review Process

Is there a size limit to the front end? As so far my extension is entirely front end, and I’m able to generate a Bearer token and contact the api without issue.

My code is also minified, so I’d have thought it’s quite difficult to get the Client Secret, but I guess there’s something I’m missing.

So just to clarify… even if there were a way to contact the Helix API from the front end, there’s no path that would allow me to find out the current user’s ID and the channel’s ID. Correct?