These two elements aren’t disadvantages with @anywhere per se – I would recommend a full server-side integration over @anywhere though.
@anywhere protects against the exposure of the secret by only allowing access tokens to be generated from a pre-registered domain name.