Loader-based checks can redirect before rendering protected components, which avoids flashing private UI while auth status is being checked.