The main idea is that this authorization method allows the entire database to be readable by the entire internet and prevents compromised secrets on the server. Our implementation cannot yet explicitly protect against an infected server or mitm.