Fair point on the title. The core principle is universal: only send necessary data to clients. I focused on Angular because the pipe + service patterns make thi

Fair point on the title. The core principle is universal: only send necessary data to clients. I focused on Angular because the pipe + service patterns make this mistake particularly common. Tutorials teach client-side filtering with pipes, and services naturally cache complete datasets for "performance." I've seen this exact vulnerability in multiple Angular codebases following "best practices."The underlying issue applies to any framework, but Angular's conventions seem to make it easier to stumble into this anti-pattern.