I recommend reading the Next.js documentation thoroughly, from start to finish:
When I say "read it," I mean really read it—understand what's best for optimizing application performance.
Blog posts you should definitely read - https://nextjs.org/blog/security-nextjs-server-components-actions. You will understand how to keep your application secure in the new app router.