Your map is pushed to your own Cloudflare Worker after every change and pulled on load, so every device sees the same parts. Only requests bearing this token can read or write the map. For extra protection, put the app behind Cloudflare Access.