[Security] Return an object instead of an array in collections

Hi everyone,

what do you think about adding the option to return an object instead of an array in collections? I think it's a good practice in terms of security (see [OWASP](https://www.owasp.org/index.php/AJAX_Security_Cheat_Sheet#Always_return_JSON_with_an_Object_on_the_outside)).

Regards