Second devil's advocate here: I know this isn't necessarily "good" in terms of security, but it's a very common pattern for higher-level tools these days to co

Second devil's advocate here: I know this isn't necessarily "good" in terms of security, but it's a very common pattern for higher-level tools these days to connect directly to databases. A LOT of marketing/analytics tools support this seemingly because users want this (see: Customer.IO, Looker, etc.) So again, I'm not saying you're wrong in that this might be a bad security practice, but OP is not alone in taking this approach and many SaaS vendors are seeing success and getting users because of it. So OP is going down a trodden path.