Storybook uses webpack to build javascript bundles. Like bundles from any website that relies on webpack, Storybook bundles contain everything that's required to render the website. If you have code that is sensitive, you need to keep it on the server and expose service endpoints to the client.