An app doing any kind of sensitive API requests will want do do those in the backend, instead of the front end.
You get many benefits, like custom caching, parallel API calls, security, etc. It isn’t a good idea to do this in JS code running in the client.