I'm a big fan of constants not only to avoid "magic numbers" but sometimes it's useful to be able to configure constants specific to the environment it's deployed on. But if a constant is exposed to the client, confidential data can be seen by anyone. In this cases a constant can't be used and all benefits from it were gone. What about a constant type "comile-time" that is not exposed to the client, usable in frontend and backend and can be configured in the model options? I'm aware that it will be visible in some JavaScript library anyway but tools like https://menscan.io do not show them right away.