Why buy a boilerplate of there's already a lot of opensource boilerplate ?

It’s more than just a boilerplate

it comes fully integrated with a backend and packed with a wide range of components.

refer this: https://www.superfa.st/pricing

Depends on your implementation, you should not store sensitive data in metadata