Every Next.js Server Action Is a Public Endpoint, and Your bind(null, id) Is Not Protected

There is a belief that quietly causes real vulnerabilities in Next.js apps: "Server Actions are...