Provide a light version of your app for the free tier that does not use any remote resources ofc.

Then you don't have to worry about "abuse".

Counter-abuse is hardly the answer

Same way Linux does it.