Actually there is no secure storage at the front-end. Any kind of data that cames to your browser is not secure. Because anyone can access it. Anyone can access to localstorage can access to cookie.

Long story short. Just dont trust frontend for any kind of security.