I wrote a tag cloud website that can be used to view the usage of all tags

Apps
4
  1. I really hope that as a minimum this is running in my browser only,
  2. Even so how can the app access my Joplin tag data without the authorisation token?
  3. What's to stop a version of this script hoovering up other data from Joplin?
  4. And, what's to stop the app being modified to send any of this data home (if it does not already)?