Wait, how is this app going to function on release if you can't stand up the basic resources for it to function for them to test it? Every user has to self host their own?
Which brings up another issue: if there isn't an easy way for you to secure the server as the developer, is it fair for you to just dump all that on your end users?