Will Isomorphic app expose backend business logic?

Question

I have a question about isomorphic app(like next.js or sapper), it is usually compiled as two bundles(one for client, another one for server) with Webpack or Rollup, Then starti