API protection in bubble

Need help APIs
1

Hello. I have some questions about bubble data protection .

  1. I have rest api with some data. Can any user get api of my server through bubble or request parameters?
  2. What is the algorithm of work of api connector? Where it process request to API, on server or client side?
  3. Does bubble have any protection from sql injections?
2

Bumping this one too @emmanuel @kathleen @grace.hong