Actually Nota uses Iframe to display the site. The widget can not be accessed directly form the site unless you have selected the "Widget on" option when creating you project. This is defiantly save in production. There is almost no overhead of having the snippet in place.