tldr - powered by Generative AI

• Observing and detecting information in an application is important for security
• Secrets should not be hard-coded into the application
• Minimizing functionality in the app reduces impact on the application
• Delegating security decisions to an outside entity is more secure
• Proposed architecture involves an App authentication service that makes security decisions and returns a JWT token to the app
• The SDK installed in the app only contains measurement capabilities
• The JWT token is added to networking calls to authenticate the app