With an increase of client-side apps combined with server api's this is less the case, though, isn't it?

I can imagine quite a few 'web apps' that won't try to actively obfuscate how their client app operates. In those cases having browser-based development tools makes it much easier to tinker with and inspect the app...