Well they can see some code yes! The front-end code of the website such as JavaScript can be seen, as well as the HTML and css.
However, they can’t see the backend security code.
The answer here will depend on what kinda class ur in. I’d say true cause u technically can see some code, just maybe not the more valuable pieces of it
