Users can expose their Gradio demo online by simply calling the launch function with share=True , which creates a tunnel to their machine and exposes the Gradio server externally using frp. Additionally, Gradio is not a “simple” backend server with a concrete task and a well-defined threat model; Gradio is a flexible framework with support for many use cases (e.g., authenticated vs unauthenticated server, local vs shared server, the ability to embed the demo in other websites, etc.). Even with a perfectly secure Gradio server, users may still have their data compromised if Gradio’s sharing architecture has flaws.