is using next-safe-action or "use server" directive causing endpoint leak ?

[ScreamZ]

I really love the middleware feature of next-safe-action, that I would like to use it sometime only on server side (like in RSC) to take profit of code factorization.

My question is : is using next-safe-action or a "use server" directive leaking anybody or anywhere a way to call the endpoint directly from outside the application ? Like from the frontend ?