Nice work, congrats!
How do you deal with security related stuff like recaptcha, signed requests and so on?
Do you also support internal APIs of mobile applications? If so, how do you deal with AppCheck / PlayIntegrity / Android Key Attestation / Apple App Attest?