Is "securing your backend" an option on the table? A simple VPN or network subnet might frustrate them and send them away, but if your product isn't secure that

Is "securing your backend" an option on the table? A simple VPN or network subnet might frustrate them and send them away, but if your product isn't secure that's a serious problem you should fix.