> The idea LocalStorage-based apps are safe is silly if you're always loading them from a remote server. This is true for any web page you load from a server i

> The idea LocalStorage-based apps are safe is silly if you're always loading them from a remote server. This is true for any web page you load from a server in a browser. My point is that Wordle's developer had to do almost no work to achieve a very high level of security. Literally the only things required are to (a) set up TLS correctly and (b) protect the app's static resources (and the server that's hosting them) from being compromised. Depending on his choice of hosting provider, code repository, and build/deploy, those tasks may have been taken care of automatically.