It is well known that react environment variables are embedded in the build and should not contain secrets.
If they are embedded in a build, how can you access them when you load the production application on a browser?
Found it, you have to look at the webpacked version. Harder to do if mangled, but not impossible.