Meteor 3 - "Meteor.userId can only be invoked in method calls or publications."?

It may not be secure to get Meteor.userId() on the client and send it to the server. Here is server-side code to get Meteor.userId():

Note the post right after that one as well.