Are you okay with having your app's binaries string dumped by unknown parties where upon they find the underlying Python source code? Some basic encryption (or tokenization) would be better, since few would expect to go looking for it.