Hi Rishabh!

Very valid concerns. To learn more about solving them, please have a look at: https://supertokens.io/blog/the-best-way-to-securely-manage-user-sessions