Good questions. I guess for eventual publishing, the app repository fees need to be paid indeed. That only applies to development and not security testing though.