Then/or refactor out server-side storage. These concerns don't surface in the same way if you never touch the data.

It sounds like a useful app but only if it can be safe. Which I don't belive it can become with a classic web2.x startup approach.