This depends on what user data your sending them. But in terms of accessing your backend APIs, it does not create a security bottleneck.