比如下面代码段，在真机和开发工具都能拿到对于的值，在微信PC客户端打开小程序时返回值是空对象 {} const res = wx.getExptInfoSync(['######']) 下面是 wx.getSystemInfoSync() 的返回值： systemInfo {"albumAuthorized": true, "benchmarkLevel": -1, "bluetoothEnabled": false, "brand": "microsoft", "cameraAuthorized": true, "fontSizeSetting": 15, "language": "zh_CN", "locationAuthorized": true, "locationEnabled": true, "microphoneAuthorized": true, "model": "microsoft", "notificationAuthorized": true, "notificationSoundEnabled": true, "pixelRatio": 1.5, "platform": "windows", "power": 100, "safeArea": {"bottom": 780, "height": 780, "left": 0, "right": 414, "top": 0, "width": 414}, "screenHeight": 780, "screenWidth": 414, "statusBarHeight": 20, "system": "Windows 11 x64", "theme": "light", "version": "4.0.3.43", "wifiEnabled": true, "windowHeight": 780, "windowWidth": 414, "SDKVersion": "3.8.3", "enableDebug": true, "devicePixelRatio": 1.5, "host": {"appId": "", "env": "WeChat"}}

我们项目中使用wx.login方法拿code换取用户信息，被安全团队质疑这种前端拿code方式有安全性问题，请问微信团队能不能解释下wx.login的原理及安全性的保障

处于安全考虑，我们想要给接口来源IP设置白名单，所以想知道小程序前端API请求可能的来源IP段是多少