I have very little JS experience. I mostly work with Python on the backend.
Having said that, you probably still need to think a little about auth etc. Depends on what you're doing. If it's all internal then it's fine but otherwise you need some notion of who the caller is and they need to send something with each request that's checked on the python backend.