Congrats on the launch. Well done.

another security approach is to enable your customers to close their inbound firewall ports and link listeners. this helps cloud and on prem models have far stronger security.

example here (disclosure: i am a founder of the company behind this solution) with both open source and OEM/SaaS models:

https://github.com/openziti-incubator/zdbc (code for one implementation - a wrapper around the JDBC drivers)

https://netfoundry.io/zero-trust-database-security/ (blog post with links to developer example video, whitepaper, etc)