Yes, when you use your environment variables in your clientside code (React, Angular, etc), the visitor will be able to see the values in the source.