Can Vite's default development server host binding inadvertently expose local endpoints to public networks?
Vite's development server defaults to binding `localhost` when no `server.host` value is provided in `vite.config.js`. This behavior aims to restrict access to the local machine during local development. However, the precise mechanism governing the default address resolution—and whether it can shift under certain configurations—remains a point of clarificati