title: Accessing to DB at client side as in server side with meteor
body: <p>I read this at the docs:</p>
  
  <blockquote>
    <p>Database Everywhere. Use the same transparent API to access your
    database from the client or the server.</p>
  </blockquote>
  
  <p>This is great, but I think there are some security issues. Providing full and transparent access to the database at client side you are exposed to bad users, which modify you JS code (it's really at his browser and he can do it) and add any database action that could retrieve/remove/update data that perhaps could be sensible.</p>
  
  <p>Please, correct me if I'm wrong.
  Thanks!</p>