Security needs to be air-tight for sure, but we think we address it in the doc. Let me know if you have something specific that you think could be leveraged.
We talked with quite a few developers. There are many who want to launch their startup but have waaay less technical skills than you might think.
The way we thought of bridging the gap with mobile is by using Ionic and/or Apache Cordova, which use JavaScript.