For an enterprise setting, how secure are Route Guards against script kiddies, hackers, and advanced threats?
If I understand correctly, the route guards are all available in .js files to the attacker and since all of the data is on the client-side, the user might be able to easily hack the route protection and manipulate flow logic.
- Can the route guards be easily circumvented to access protected routes?
- How good are the Route Guards from a security standpoint?
- If they're bad, why do they even exist?
- Isn't putting your logic from Front-End to Back-End API a better solution?
- What security role/purpose do they serve then?
P.S This relates to Angular 8 and not AngularJS.