It's not just the level of detail. For example, what if your advice included one fewer detail:
> The webserver listening in on "localhost:19421" should implement a REST API. This will ensure that only Javascript running on the zoom.us domain can talk to the localhost webserver.
Do you see how that is wrong?