If the devs have servers to validate authorization anyway, then NFTs are unnecessary. Were also discussing the case where the devs go under and no longer provide such a service.

Asking clients to check their own NFTs is very weak DRM.

So what is the actual proposed flow?