Bubble exposing all API Connector details on page load?

Anything in your API Connector not marked as ‘private’ should not be expected to be private.