title: Are session variables hidden from the user in MeteorJS?
body: <p>Just wondering, should we be using Meteor's sessions on the assumption that in production, the user has read and/or write access to them at all times or is it like encrypted similar to ASP.NET View States?</p>
  
  <p>Just want to know if I have to design / test my application for the user modifying them. </p>