It is not exposed, but the js file is exposed. How to prevent private variables from being leaked
There is nothing you can do about js, just make sure the interface is secure
There is nothing you can do about js, just make sure the interface is secure