The entire site is delivered to the client, including a JS script that generates and renders the numbers.

No network calls are made when the 'Refresh' button is clicked, but business logic is exposed to the client.

This approach offers fast load times but can compromise security by exposing more logic to the user.