How do you secure your data? If you can update it client-side, what stops people from writing their own scripts in the browser console to arbitrarily re-write your data?

Browsers can’t write, only read. So you would need another way to get client input into the db if that is the requirement.