this method is exposing all my sensitive env variables to the browser. I can literally see all NEXT_PUBLIC env variables in the browser. this is very dangerous.