Is serverless insecure? Let's find out