Say I have the following view

app.get('/data', (req, res) => {
    let data = await Data.findOne({ field: "doesnt matter" })
    // data returns a mongoose obj i.e  {_id: ... , __v: ...}
    res.render('dataPage', { info: data });
})

Is it safe to pass a mongoose object directly to res.render()? I am worried that a user on the front end will be able to access the information in the info object that is coming from the render method.