So did this test for one guy (just after launch, cold DM), and found out that his react code could be traversed under /assets - they had somehow put code files in their /public directory while building their app.

Right now, its's only been a month since launch and currently 123+ businesses have used this