That’s really about creating an MVP for a startup, because too many founders stay in a cave trying to make it “perfect” before collecting valuable user feedback.

This does not apply to Cloudflare, especially not for an auth token that needs to be published on your website that cannot be restricted.