Is the runtime environment of a smart contract going to be seen by the hosting node? If not, how?
Can the smart contract safely pass an API key to memory?
Should Solidity developers just deem smart contracts runtime as endangered similarly to web apps front ends?