i wasn't too concerned about that because i was storing the state file in a google cloud bucket with limited access...i guess i'll try out some Javascript SDKs