this a million times. the next.js intermixing of backend / frontend code is a security nightmare.