Remote booleans beat redeploys
When a bad release ships on a Friday, you want a kill switch, not another deploy pipeline. A public JSON flag endpoint your client can fetch is the smallest useful control plane.
Keep secrets in Environments. Keep toggles in Flags. Mixing them is how API keys end up in the browser.
Start with one kill switch
Create a flag named after the risky feature, default it on, and gate the UI. Flip it from the dashboard when metrics look wrong.
Graduate to richer targeting platforms only when segments and percentage rollouts become daily work.