Question on security

#1

I understand that public properties in Livewire components are exposed to javascript, but what about public functions?

Is it safe to do subscription or other private logic in those functions called by wire:click?

#2

User can call any public method of a component from browser console.
So you need to do all input validation as you would do for non-livewire ways of proceeding those things.