Hello,
The detection of HTML comment removals was not 100% accurate in some edge cases. If you can view the shortcode [wallets_balance template="list"] without problems, then don’t worry about it.
Thank you very much for spotting the other issue you mentioned regarding 403 errors. Turns out that, now that the JS code is lazy-loaded, some of the extensions can force the main plugin to load the JS code, even if the user is not logged in. I can fix this easily in the next patch of the plugin. I will notify you, but don’t worry about it, as it doesn’t cause any serious issue, other than minor performance reduction.
with regards