@jeder so helene's one is checking incoming signed fetch, and not allowing fetch that isn't signed.
the older one i would have to check but yeh it does that allowlist stuff, hiding stuff from the frontend... secure mode does all that allowlist stuff, hiding stuff from the frontend and so on.