I usually go with the reverse proxying approach. If I didn't have access to both backends or enough resources to implement a decent solution I figure I wouldn'

I usually go with the reverse proxying approach. If I didn't have access to both backends or enough resources to implement a decent solution I figure I wouldn't have enough resources to be confident in the security.