A reverse proxy or isolation layer protects browser traffic

The main UI path is controlled and the export side path bypasses it. The service still works through the primary path, but one dependency only fails when the old component is finally drained away.