Backend workflow run without authentication

[dbevan]

@pedicab

Is a non-exposed API workflow that does not require authentication and ignores privacy rules inherently a vulnerability?

Yes! There are a ton of posts on this topic such as Stripe Webhook in Bubble - big vulnerability to all apps that use them