This is a great set of tests. Once you move out of the side-project phase and start turning stuff into a business, you probably care about security features too

This is a great set of tests. Once you move out of the side-project phase and start turning stuff into a business, you probably care about security features too. Unfortunately, most VPS providers don't have a great track record there. With the big Cloud providers, you have tools like AWS' VPCs and security groups to help fence off parts of your app from the rest of the world. In a perfect world, you wouldn't care so much about network reachability and care a lot more about, say, mTLS or at-rest crypto. But as a young company, managing that probably isn't the best thing to spend your resources on right now. Much like Google's BeyondCorp: just because you can expose some apps to the internet with years of work and millions in resources doesn't mean that a VPN or a SG isn't a pretty good idea for now -- if nothing else, it'll do a pretty decent job protecting you from the background radiation of the Internet :)