Mine is a web game.
I notice that when there is any error in loading from remote cdn the path gets printed to console. And although the path is token protected the player has the token in order to downloaded the file remotely through construct so i guess it would be extremely easy to download it directly from the cdn and read the whole file
Loading remotely is easier for for future edits because base game remains the same however if for web including the file in the project makes it harder to see then the effort would be worth it. But i take it either way it's going to be easy to see the file ?