NThis isn’t true, if your DB credentials are getting leaked by your API you’ve done something very wrong
NAre you using something like Next?
NRight, this might be quite specific to vercel then, but certainly in AWS/Azure there are ways to connect to a DB without having to expose its IP to the internet